News for hackers. Stuff that matters.

A comment on Using two-factor authentication for SSH. Parent comment

Re:Using two-factor authentication for SSH by Freak_NL on Tuesday January 12, 2016 @03:38PM (#10890179)
There is a crucial difference here. With FIDO U2F I am not limited to Yubico's offerings; there are other vendors. FIDO U2F devices can be manufactured by any company (and are).

I agree that the ideal situation would be a device that is completely under the control of the user, but compared to IOS or Android, a hardware token that only does what it is supposed to do (in the case of the U2F tokens; register and sign authentication requests), and cannot be modified by the manufacturer after sale is very much preferable.

[ Parent | on HN ]
Re:Using two-factor authentication for SSH by superuser2 on Tuesday January 12, 2016 @06:00PM (#10891074)
That's not a difference. You are also free to choose among many different smartphone manufacturers and OSes, all of which are capable of running a TOTP app.
[ Parent | on HN ]