3 ms·
> Or out of a Yubikey for that matter. You don't, and neither does an adversary. That is literally the whole point of paying $50 for a Yubikey.
by bigfatkitten 2y ago
> Or out of a Yubikey for that matter.
You don't, and neither does an adversary. That is literally the whole point of paying $50 for a Yubikey.
- nottorp 2y agoSo I need to pay for the privilege of having a single point of failure for my credentials :) Oh no I forgot, I could pay even more to have backups.
- bigfatkitten 2y agoIt's an open specification. You can make your own if you like. If the security properties of a hardware authenticator aren't important to you, you don't need to use one at all.
- nottorp 2y agoA phone is also a hardware authenticator in this case. With the same problems in case of theft/destruction.