Hacker News new | ask | show | jobs
by thomashabets2 3082 days ago
I prefer a physical presence proof for SSH instead of this proposed solution:

https://blog.habets.se/2017/10/Yubikey-for-SSH-after-the-inf...

(long version here: https://blog.habets.se/2016/01/Yubikey-4-for-SSH-with-physic...)

Before that I used the method described in the article, blogged at https://blog.habets.se/2013/02/GPG-and-SSH-with-Yubikey-NEO....

1 comments

The blog post you linked to is using the PIV applet on Yubikey. You can do touch based OpenPGP operations on Yubikey too: https://developers.yubico.com/PGP/Card_edit.html#_yubikey_4_...
Only for YK4, the old neos and YK3 don’t seem to support that. (Makes me consider buying a YK4 right now)