Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Yes you can, SSH 8.3ish uses FIDO2 and doesn't do anything Yubikey-specific. That means you don't have to bother with all the agent stuff, and it works with any dirt-cheap FIDO2 key.

EDIT: I'm going to post a writeup tomorrow detailing how to do this, because it's wonderful and super secure.



Thanks, going to look into it more tonight, see if I can get a 5C setup.


It is literally just the two commands, I can send them to you when I'm at the pc. I have a 5C too.


That'd be great, thanks. I'll have to do a follow up to my blog post: [SSH 2-Factor's First Factor](https://2byt.es/post/totp2/) once I've had a play.


Have Nitro keys on the way. Looking forward to your writeup, mate.


It is here! https://news.ycombinator.com/item?id=23689499




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: