Hacker News new | ask | show | jobs
by bdamm 2253 days ago
Using a hardware token as the authenticator for SSH sessions. Taken to the fullest, this allows you to completely avoid password authentication for SSH, except for the initial upload of your public key.
1 comments

Thanks! That makes sense. I don't get the name, but this is what we call that now?
U2F/Fido refers mainly to doing through the browser, but as you probably know, the browser is only the end of the line of a long chain of usability oriented changes. It's been a decade in the making. Now SSH is using that mechanism, just not through the browser. Personally I'm psyched, lots of apps can start using this approach and get a great user experience!