News for hackers. Stuff that matters.

A comment on Show HN: GPG on macOS and YubiKey. Parent comment

Re:Show HN: GPG on macOS and YubiKey by tanderson92 on Wednesday November 13, 2019 @10:49AM (#21525435)
Oh that's great, alleviates my concerns, which was like, how do you know you're even asking the yubikey to do key generation rather than a malicious actor generating a private key and placing it on the yubikey. Thanks!
[ Parent | on HN ]
Re:Show HN: GPG on macOS and YubiKey by trishankdatadog on Wednesday November 13, 2019 @01:53PM (#21527888)
If you don't trust the hardware, then don't use it. I'm not sure what solution would fit your threat model, other than building your own.
[ Parent | on HN ]
Re:Show HN: GPG on macOS and YubiKey by tanderson92 on Wednesday November 13, 2019 @02:53PM (#21528695)
I didn't say I distrusted the hardware, I said the very opposite. I said I didn't see how, before this attestation feature, you could guarantee your computer software even asked the hardware to generate the key.
[ Parent | on HN ]