Using a Yubikey as a touchless, magic unlock key for Linux

Re:Using a Yubikey as a touchless, magic unlock key for Linux by trishankdatadog on Monday August 17, 2020 @05:21PM (#24192289)

BTW, here is a handy way to quickly generate GPG keys (and set up git commit signing and SSH key derivation) on Yubikey: https://github.com/DataDog/yubikey

[ Parent | on HN ]

Re:Using a Yubikey as a touchless, magic unlock key for Linux by StavrosK on Monday August 17, 2020 @08:14PM (#24193851)

If you only want to do SSH, that way is a huge hassle, way too much to do on machines you don't own/are using casually. If you can use newer SSH versions, they support FIDO2 natively:

https://www.stavros.io/posts/u2f-fido2-with-ssh/

[ Parent | on HN ]

Re:Using a Yubikey as a touchless, magic unlock key for Linux by Legogris on Monday August 17, 2020 @09:08PM (#24194254)

I don't think many people use GPG keys for SSH only (:

[ Parent | on HN ]

Re:Using a Yubikey as a touchless, magic unlock key for Linux by trishankdatadog on Monday August 17, 2020 @10:08PM (#24194571)

Sure, but most SSH servers probably don't support FIDO2 yet (GitHub didn't the last time I checked).

Also, please sign your git commits.

[ Parent | on HN ]