Re:Biometric YubiKey
by Someone1234 on Wednesday November 06, 2019 @05:13PM
(#21468091)
What services even support multiple keys?
That's been my biggest struggle, I want a primary and backup key but almost every service I use only allows one at a time. I cannot duplicate the same key because it increments internally to avoid replay.
Not as many as I would like, but: google, github, hetzner, ovh, gandi, gitlab, bitwarden are some that support multiple keys.
Re:Biometric YubiKey
by acheron9383 on Wednesday November 06, 2019 @07:07PM
(#21469021)
I suppose for sites that only allow one, you can store their backup codes in bitwarden behind you multi-key service. Still annoying.
Re:Biometric YubiKey
by tialaramex on Wednesday November 06, 2019 @05:17PM
(#21468138)
Facebook, GitHub and Google are common sites which allow multiple keys.
Is there a service that limits to a single key? I've never encountered one.
AWS only allows one U2F token to be registered at a time.
Zoho.
twitter. :(
The way I see it, I would want the bio version to be the one on my person. I still have the other put away where it won't be lost.
I lose my hand? Still have a backup. I lose my key? Backup and maybe I have a little bit of extra time to update my bank MFA while the thief figures out the fingerprint situation.