3 ms·
yubikey 5 nano, get two. i use it w/ ssh. took a little googling to integrate the gpg authentications key w/ ssh. instead of using ssh-agent, you'd use gpg-agen
by waynesonfire 4y ago
yubikey 5 nano, get two. i use it w/ ssh. took a little googling to integrate the gpg authentications key w/ ssh. instead of using ssh-agent, you'd use gpg-agent to manage the keys.
there are other integrations, for example, i can also unlock my mac w/ the yubikey.
- newjersey 4y agoOn gnome on fedora at least, I can have my gpg automatically unlock when I login to the desktop. I already have two steps on GitHub with the authy app but I don't get it. Why is it not good enough to send an email with a code when signing in without a cookie for people who don't want to opt in to two steps? The way I see it my authy is a vulnerability because if someone were to guess my authy phone number, they could technically grab all of my TOTP. I don't get this spoon feeding. I mean I would sign up to two steps where I can but something doesn't feel right about the lack of choice.
- waynesonfire 4y agoi hate checking email or looking at my phone for two step auth. either choice requires me to access another system. It requires far fewer steps to just tap the button on the side of the yubikey.
- mzs 4y agoIt's pricey but looks like it won't be too warty, thanks. https://forums.freebsd.org/threads/yubikey-5-nfc-not-working-with-yubioath-desktop-py-yubikey-manager-and-py-yubikey-manage-qt.78025/ https://forums.freebsd.org/threads/yubikey-5-nfc-not-working...