misusing USB keycards?

Posted Oct 4, 2017 21:43 UTC (Wed) by Cyberax (✭ supporter ✭, #52523)
In reply to: misusing USB keycards? by anarcat
Parent article: Strategies for offline PGP key storage

My Yubikey prompts me to tap on it when it needs to do a U2F or OTP signature.

to post comments

Posted Oct 13, 2017 13:34 UTC (Fri) by nix (subscriber, #2304) [Link] (2 responses)

GPG operations (CCID operations in general) are different from U2F/OTP/HMAC-SHA1. No tap is required.

Posted Oct 13, 2017 14:03 UTC (Fri) by johill (subscriber, #25196) [Link] (1 responses)

You can configure the Yubikey (at least 4) to do that too.

Posted Oct 17, 2017 21:23 UTC (Tue) by nix (subscriber, #2304) [Link]

Yeah, this is a new feature in the 4.