4 ms·
My token has a global pin which when o unlock, I can authorise any request with a simple click. But for ssh keys I do have a pin for each one. The websites I've
by ranguna 4y ago
My token has a global pin which when o unlock, I can authorise any request with a simple click. But for ssh keys I do have a pin for each one. The websites I've tried never requested for a pin when setting up.
Also LUKS does use FIDO2 https://www.freedesktop.org/software/systemd/man/systemd-cryptsetup@.service.html https://www.freedesktop.org/software/systemd/man/systemd-cry...
- Borealid 4y agoFirefox (only talking about Firefox here) does not use CTAP2, to the best of my knowledge. What you think is "FIDO2" is likely actually U2F/CTAP1. Backwards compatibility with that protocol is part of the FIDO2 spec, but it doesn't enable no-username-provided authentication. LUKS uses libfido2, which supports CTAP2 (and most of CTAP2.1).