2 ms·
Great, modern guide. Thanks! While I have a few Yubikeys in a drawer somewhere, for years I've preferred to use an actual smartcard to store my keys. Sure, it
by imiric 4y ago
Great, modern guide. Thanks!
While I have a few Yubikeys in a drawer somewhere, for years I've preferred to use an actual smartcard to store my keys. Sure, it only offers a subset of the features of a USB key, but I've found that I really only need to sign, auth and decrypt data. All the other fancy things like OTP, FIDO, etc., either have alternatives (e.g. pass-otp), or are just not used often enough. I haven't been in a situation yet where I _need_ to use a USB key.
Besides, the experience of using Yubikeys always annoyed me. The touch functionality was way too sensitive, causing many unwanted triggers. Having it always stick out made me nervous it was going to break. And the small USB-C version was often difficult to remove, while also taking up a USB slot.
Smartcards are nice since they're compact and stay neatly inside a laptop, and they use a separate interface for that purpose, instead of the generic USB. I wish more laptops had readers for them.
- beagle3 4y agoWhich card are you using?
- imiric 4y agoOn my laptop, this one[1]. While there's a model that supports NFC, I've found these don't work well with Password Store + OpenKeychain on Android. So I use a different unbranded one there. Don't remember where I bought it, but there's nothing special about it. [1]: https://www.floss-shop.de/en/security-privacy/smartcards/ https://www.floss-shop.de/en/security-privacy/smartcards/
- Mindless2112 4y agoIf you're looking for a FIDO smartcard, I've been using this [1]. [1] https://shop.cryptnox.com/products/cryptnox-fido-2-card https://shop.cryptnox.com/products/cryptnox-fido-2-card