FIDO2 security key company releases hardware that's open source and uses Rust

Re:FIDO2 security key company releases hardware that's open ... by user3939382 on Friday February 12, 2021 @07:30PM (#26120312)

My threat model is focused on remote attacks, I consider physical access to my workstation game over. So one stays on my keys, one on my wife’s keys, and one stays plugged into my workstation.

If I’m enrolling the keys with a given service I make sure to add or remove all three at the same time so I don’t have to track which is associated with different accounts.

[ Parent | on HN ]

Re:FIDO2 security key company releases hardware that's open ... by XorNot on Friday February 12, 2021 @08:32PM (#26120646)

This isn't really an adequate threat model today though, where everyone has laptops. Having a workstation stolen for most us is actually extremely likely - probably more likely then someone trying to attack our credentials.

In this case though, full-disk encryption and TPM usage is the mitigation - provided the disk goes dead when anyone short of a nation-state tries to manipulate it, you're good.

[ Parent | on HN ]