I'd need to get a TPM first, which was worse by every metric compared to external keys last time I compared them. FIDO keys are already here and can also be us

I'd need to get a TPM first, which was worse by every metric compared to external keys last time I compared them. FIDO keys are already here and can also be used for web authentication (which is their main use case. this is just a nice add-on). They can also be used to conveniently unlock LUKS volumes which I completely forgot about since I'm not using LUKS: http://0pointer.net/blog/unlocking-luks2-volumes-with-tpm2-fido2-pkcs11-security-hardware-on-systemd-248.html http://0pointer.net/blog/unlocking-luks2-volumes-with-tpm2-f...