3 ms·
How would a GPG-based password manager fare here, assuming it's using a Yubikey the same way?
by pxc 4y ago
How would a GPG-based password manager fare here, assuming it's using a Yubikey the same way?
- lvass 4y agoAFAICT, the strength of both TOTP and public key protocols over fixed-response mechanisms depends on actually having two distinct parties, otherwise you're just adding keys that can likely be all exfiltrated by the same threat. I can see the yubikey being more meaningful if you're storing the passwords in a server whose security you trust more than your desktop, but having an infected desktop is still very bad.