3 ms·
If only there was some kind of a physical tokem with a crypto key that is protected by a password and tied to one's bank account. -s
by Muromec 1y ago
If only there was some kind of a physical tokem with a crypto key that is protected by a password and tied to one's bank account.
-s
- craftkiller 1y agoThe only bit we're lacking is the "tied to one's bank account". The rest already exists in the form of yubikeys and other hardware security tokens.
- FateOfNations 1y agoYour bank/credit/debit/etc. card is a “physical token with a crypto key that is protected by a password and tied to one's bank account”. FIDO and EMV even both use the same underlying ISO/IEC 7816 and 14443 protocols for communications.
- craftkiller 1y agoAh! I forgot about my debit card. I only use it ~once per month. Yeah, we'd need an additional piece of hardware to be able to connect it to our computers but that also could enable doing chip-based transactions over the internet so I think it would absolutely be worth it.
- pasttense01 1y agoSome of us don't want to have a dozen plus separate physical tokens (one for each of bank/credit card/tax, etc sites with sensitive financial information we have).
- Muromec 1y agoOkay, I will make the "S" mark bigger next time.
- mixmastamyk 1y agoNot how it works. One key can keep dozens of entries.
- nmca 1y agoI know this was sarcasm, but bank card is not appropriate because you should have one hardware key for all services produced by an independent provider.
- Muromec 1y agoWhy would I want to have one key for all them? To lose access or get them all compromised at the same time?
- nmca 1y agoI think your threat model is bad — the isolation of accounts offers little and most people have effectively only the security of their email provider anyway. That said, buying several keys would be a natural and happy path solution for the paranoid. Make sure to get three for each account (same as primary) as either you need a backup or the extra key offers no extra security.