50 ms·
Can you point to any existing write ups that are more in line with your methodology, for those of us that want to dig in and give it a try?
by schaefer 4y ago
Can you point to any existing write ups that are more in line with your methodology, for those of us that want to dig in and give it a try?
- xaduha 4y agoIf you have Yubikey, then this is fine https://xeiaso.net/blog/yubikey-ssh-key-storage https://xeiaso.net/blog/yubikey-ssh-key-storage. I have Google Titan NFC which is basically Feitian K9 NFC, so it doesn't support -O resident. Back in 2016 I was using https://github.com/philipWendland/IsoApplet https://github.com/philipWendland/IsoApplet which uses https://en.wikipedia.org/wiki/PKCS_11 https://en.wikipedia.org/wiki/PKCS_11 standard, but modern way is much smoother as long as your OpenSSH server is up to date.
- rgoulter 4y agoFWIW, the method in that xeiaso link (using resident keys on a security key) can be done with the cheaper "Security Keys" from Yubico, and doesn't need the more expensive Yubikey. -- The cheaper security key can be used as a FIDO key as 2FA for many websites; or even for stuff like Linux login.