5 ms·
TOTP (Time-based one-time password) need a shared secret (and two synchronized clocks) to work, so yes. FIDO2/WebAuthn relies on public key technology - so doe
by e12e 3y ago
TOTP (Time-based one-time password) need a shared secret (and two synchronized clocks) to work, so yes.
FIDO2/WebAuthn relies on public key technology - so does also have a secret key - but is designed to be kept secret from the service/server one authenticates against.
For use - FIDO2 is more like a multi-use id. Like a driver's license many services accept as id. If you lose it - you don't restore a backup copy from a safe - you use your passport until you get a new one issued.
This makes more sense than with TOTP as the services only need your public key(id) on file.
https://en.wikipedia.org/wiki/Time-based_One-time_Password https://en.wikipedia.org/wiki/Time-based_One-time_Password
https://en.m.wikipedia.org/wiki/WebAuthn https://en.m.wikipedia.org/wiki/WebAuthn
- rawgabbit 3y agoWhich FIDO2 service do you recommend? I get tired reading all these security articles. The more I read, the more I feel they are hiding something.
- e12e 3y ago> Which FIDO2 service do you recommend? Generally what comes with your phone and one or two hw tokens for backup? Looks like token2.com is a reasonable choice if you just want NFC/USBc and FIDO2 (and not storage for ssh/gpg keys). But I have little experience with hw keys.
- drhuseynov 3y agossh and pgp keys are not based on the similar functionality. the keys from Token2 support *-sk key storage https://www.token2.com/site/page/using-token2-fido2-security-keys-for-openssh https://www.token2.com/site/page/using-token2-fido2-security... But not PGP
- e12e 3y agoThank you for the reminder that ssh now has FIDO2 support!