5 ms·

Our computers should have a specific port for a physical key which we would carry around in our keychain.

• taeric 4y ago
  And what do you do when your key is broken or lost? Because that will happen.
  • quickthrower2 4y ago
    Backups! Copy of key at friends house.
    • mr_mitm 4y ago
      So that the friend, or someone who steals from the friend can impersonate me? Proving your identity when you lost your proof of identity is still an unsolved problem if you ask me. At least in general, it seems that there is no one solution that works for everyone.
      • quickthrower2 4y ago
        Only if that key is the only factor.
      • upofadown 4y ago
        Put a PIN on it... You can remove the PIN later. The hardware key can be set up to wipe the device after, say, 10 incorrect guesses.
        • taeric 4y ago
          If it can be wiped on incorrect pin usage, you can be maliciously locked out of accounts relatively easily.
          • upofadown 4y ago
            Then you are going to know that the friend was messing with your hardware key. Better that than finding out they are willing to betray you by stealing from you.
    • taeric 4y ago
      If it is copiable, how would you know if it had been compromised? My understanding is that backup keys should not be identical for that reason. Let's you revoke and audit use. As such, having a backup has to be accessible so that you can register it places. There are tricks, but they only work in certain scenarios. Mostly not in the fido use cases.
• dwaite 4y ago
  Something like https://www.yubico.com/product/security-key-c-nfc-by-yubico/ https://www.yubico.com/product/security-key-c-nfc-by-yubico/ ?