Re:Getting Started with Security Keys
by chowell on Thursday October 31, 2019 @01:13AM
(#21405938)
I was super surprised to learn AWS will only allow you to register a single FIDO token - the inherent lockout risk pushed me back to using OTP with the seed stored in multiple Yubikeys.
[ Parent
| on HN ]
This is actually against the WebAuthn spec (https://www.w3.org/TR/webauthn-1/#credential-loss-key-mobili...). Hope they fix it soon.
Re:Getting Started with Security Keys
by bradstewart on Thursday October 31, 2019 @04:10PM
(#21413170)
Yea it's very annoying. I ended up making multiple IAM users--one for each of my security keys.