Does anyone have any experience with a YubiKey? Specifically using it with the PAM module you can download from their site and tying it to logins for Linux/*BSD/MacOS ? I've got lots of experience (from jobs) using RSA SecurID tokens, tying them to sshd/login/sudo/etc with pam and the securid PAM module, and it works really well.. I understand YubiKey is not going to print out a stream of changing digits for me, but nor will it require an RSA SecurID server and all that goes along with it.. And also I've read you can store your GPG private keys on the yubikey, which sounds cool. Is it worth the buy? Anyone using it for any of the above (or other) purposes? I suppose I should do some more reading, just curious if anyone loved it or hated it or whatever.. thanks! -- GPG fingerprint: 17FD 615A D20D AFE8 B3E4 C9D2 E324 20BE D47A 78C7
https://github.com/hillbrad/U2FReviews On Wed, Nov 29, 2017 at 8:25 PM, John Newman <jnn@synfin.org> wrote:
Does anyone have any experience with a YubiKey? Specifically using it with the PAM module you can download from their site and tying it to logins for Linux/*BSD/MacOS ?
I've got lots of experience (from jobs) using RSA SecurID tokens, tying them to sshd/login/sudo/etc with pam and the securid PAM module, and it works really well.. I understand YubiKey is not going to print out a stream of changing digits for me, but nor will it require an RSA SecurID server and all that goes along with it.. And also I've read you can store your GPG private keys on the yubikey, which sounds cool.
Is it worth the buy? Anyone using it for any of the above (or other) purposes? I suppose I should do some more reading, just curious if anyone loved it or hated it or whatever..
thanks!
-- GPG fingerprint: 17FD 615A D20D AFE8 B3E4 C9D2 E324 20BE D47A 78C7
On Nov 30, 2017, at 12:03 AM, Kurt Buff <kurt.buff@gmail.com> wrote:
https://github.com/hillbrad/U2FReviews
On Wed, Nov 29, 2017 at 8:25 PM, John Newman <jnn@synfin.org> wrote:
Does anyone have any experience with a YubiKey? Specifically using it with the PAM module you can download from their site and tying it to logins for Linux/*BSD/MacOS ?
I've got lots of experience (from jobs) using RSA SecurID tokens, tying them to sshd/login/sudo/etc with pam and the securid PAM module, and it works really well.. I understand YubiKey is not going to print out a stream of changing digits for me, but nor will it require an RSA SecurID server and all that goes along with it.. And also I've read you can store your GPG private keys on the yubikey, which sounds cool.
Is it worth the buy? Anyone using it for any of the above (or other) purposes? I suppose I should do some more reading, just curious if anyone loved it or hated it or whatever..
thanks!
-- GPG fingerprint: 17FD 615A D20D AFE8 B3E4 C9D2 E324 20BE D47A 78C7
Thanks! I’m giving it a read. Doesn’t seem to be too focused on my particular use case, but of course U2F in the browser is also very cool.
participants (2)
-
John Newman -
Kurt Buff