4 ms·

Ahem... YubiKey... maybe?

by subhro 5y ago

genmud 5y ago
For which account? At least a few years ago, some of their apps or certain workflows didn't support certain MFA methods like u2f token auth and stuff like that.
ziml77 5y ago
If only. If there was a good mainstream push for them we'd actually end up seeing decent support. Not just on the service side but also on the local hardware side. NFC would be the way to go since you don't have to worry about 3 different ports (USB-A, USB-C, and Lightning). Laptops could have a receiver near the keyboard and desktops could either have a standalone receiver sitting on the desk or one embedded in or mounted to the monitor.
- Nextgrid 5y ago
  I remember having a Dell laptop with built-in NFC & contacted smartcard reader. I wish this caught on, or at least the NFC bit.
dividedbyzero 5y ago
Are there Yubikeys or similar hardware tokens that work on mobile devices that don't involve dongles? My NFC-enabled one is pretty much useless on iOS sadly.
- sebazzz 5y ago
  NFC enabled Yubikeys work fine on iOS, but not if you protect them with a PIN code.
- tialaramex 5y ago
  If your phone has a fingerprint reader (or maybe Apple's facial recognition?) it can do the exact same thing as Yubikeys are doing to, for example, sign into GitHub - WebAuthn. The phone says, well, I am me, and this user is my owner because their fingerprint matches, so here you go, here is my signed message saying I promise I'm still me and my user is still whoever they are, let us is. The technology to make that work is a bit easier for Apple because they own the entire ecosystem, on Android there's some shenanigans because you can install a different Web Browser (e.g. Firefox) and this still needs to work, yet it mustn't work if that free-to-play match four puzzle you installed claims to be a web browser that needs to log into your bank... so Google actually gives out "This is really a web browser" Android stickers for release builds of e.g. Firefox that let WebAuthn work.

Ahem... YubiKey... maybe?

by subhro 5y ago

Ahem... YubiKey... maybe?

For which account? At least a few years ago, some of their apps or certain workflows didn't support certain MFA methods like u2f token auth and stuff like that.

ziml77 5y ago

If only. If there was a good mainstream push for them we'd actually end up seeing decent support. Not just on the service side but also on the local hardware side. NFC would be the way to go since you don't have to worry about 3 different ports (USB-A, USB-C, and Lightning). Laptops could have a receiver near the keyboard and desktops could either have a standalone receiver sitting on the desk or one embedded in or mounted to the monitor.

Nextgrid 5y ago
I remember having a Dell laptop with built-in NFC & contacted smartcard reader. I wish this caught on, or at least the NFC bit.

dividedbyzero 5y ago

Are there Yubikeys or similar hardware tokens that work on mobile devices that don't involve dongles? My NFC-enabled one is pretty much useless on iOS sadly.

sebazzz 5y ago
NFC enabled Yubikeys work fine on iOS, but not if you protect them with a PIN code.
tialaramex 5y ago
If your phone has a fingerprint reader (or maybe Apple's facial recognition?) it can do the exact same thing as Yubikeys are doing to, for example, sign into GitHub - WebAuthn. The phone says, well, I am me, and this user is my owner because their fingerprint matches, so here you go, here is my signed message saying I promise I'm still me and my user is still whoever they are, let us is. The technology to make that work is a bit easier for Apple because they own the entire ecosystem, on Android there's some shenanigans because you can install a different Web Browser (e.g. Firefox) and this still needs to work, yet it mustn't work if that free-to-play match four puzzle you installed claims to be a web browser that needs to log into your bank... so Google actually gives out "This is really a web browser" Android stickers for release builds of e.g. Firefox that let WebAuthn work.