Recent Features
| |||||||||||||
Fedora accepting YubiKey one-time passwordsFedora accepting YubiKey one-time passwordsPosted Oct 14, 2010 10:41 UTC (Thu) by loevborg (guest, #51779)Parent article: Fedora accepting YubiKey one-time passwords Very interesting, thanks for the article. I was wondering why more projects weren't taking advantage of OTP keys, which offer obvious benefits. YubiKey works with LastPass also. It would be interesting to know if this really improves the security - e.g. when logging in to your mail account in an Internet cafe (which normally is so insecure it almost hurts). In particular, it seems that it's possible to disable or circumvent the OTP requirement for logging in. What is the point of using it if it isn't made obligatory?
(Log in to post comments)
Fedora accepting YubiKey one-time passwords Posted Oct 15, 2010 9:32 UTC (Fri) by salimma (subscriber, #34460) [Link]
Not making it compulsory makes it possible to recover from a lost YubiKey. As you suggested, the use case is thus to use the key's OTP when logging in from untrusted locations, and for high-security applications that demand it, and to use your normal password from computers you control, in the case that you forgot / lost your hardware key.
|
|||||||||||||