3 ms·
If you have Yubikey, then this is fine https://xeiaso.net/blog/yubikey-ssh-key-storage https://xeiaso.net/blog/yubikey-ssh-key-storage. I have Google Titan NFC
by xaduha 4y ago
If you have Yubikey, then this is fine https://xeiaso.net/blog/yubikey-ssh-key-storage https://xeiaso.net/blog/yubikey-ssh-key-storage. I have Google Titan NFC which is basically Feitian K9 NFC, so it doesn't support -O resident.
Back in 2016 I was using https://github.com/philipWendland/IsoApplet https://github.com/philipWendland/IsoApplet which uses https://en.wikipedia.org/wiki/PKCS_11 https://en.wikipedia.org/wiki/PKCS_11 standard, but modern way is much smoother as long as your OpenSSH server is up to date.
- rgoulter 4y agoFWIW, the method in that xeiaso link (using resident keys on a security key) can be done with the cheaper "Security Keys" from Yubico, and doesn't need the more expensive Yubikey. -- The cheaper security key can be used as a FIDO key as 2FA for many websites; or even for stuff like Linux login.