Hacker News new | ask | show | jobs
by oil25 2410 days ago
> For usability while balancing security, cache PIN for at most a day.

https://github.com/DataDog/yubikey/blob/master/gpg.sh#147

This statement has no effect when using Yubikey - the PIN is cached by the key itself and it will remain unlocked indefinitely until it's physically unplugged. See https://dev.gnupg.org/T3362

1 comments

Interesting. This hasn't been my experience, so not sure what's going on yet...