3 ms·
I’m unclear as to why we can’t use some sort of tpm for webauthn and distributed encrypted passwords for synchronisation. Hell, even software based implementat
by hsbauauvhabzb 4y ago
I’m unclear as to why we can’t use some sort of tpm for webauthn and distributed encrypted passwords for synchronisation.
Hell, even software based implementations which force domain checking would solve 99% of the problem…
- ilyt 4y agoTechnically, we can just use client certs, YK supports them (via smartcard emulation, you can also use that to auth via SSH), just it wasn't really there, ever, on UI front...