3 ms·
Yubikey's are different in that there isn't (well, doesn't have to be) a centralized location where management of the keys is handled. Yubico offer a solution w
by obituary_latte 14y ago
Yubikey's are different in that there isn't (well, doesn't have to be) a centralized location where management of the keys is handled. Yubico offer a solution where you can authenticate/issue/revoke keys from within your own infrastructure[1]. So long as you keep that secure (say with HSM) you should be OK.
[1]http://www.yubico.com/products/services-software/validation-server-components/ http://www.yubico.com/products/services-software/validation-...
- reidrac 14y agoI haven't checked YibiKey myself, but it is been supported by Fedora for some time now: https://fedoraproject.org/wiki/Using_Yubikeys_with_Fedora https://fedoraproject.org/wiki/Using_Yubikeys_with_Fedora According to Fedora wiki they're used to create OTPs (one time passwords), but still... I don't like the idea of a physical token that can be stolen and used without verifying the user (meaning that you still need user/password or any other auth mechanisms to complement the Yubikey).
- obituary_latte 14y agoYeah you will still need username/pass for google I'm sure. Although they mentioned something about a ring? NFC maybe? If you run your own server, though, you can set up challenge-response on the Yubikey which might make things easier by allowing maybe a PIN instead of a password. Hopefully one day soon we will be able to authenticate with behavior; maybe a combination of gate/speech cadence/facial structure. Or maybe like a Rorschach test instead of username/password field :)