Use TouchID to Authenticate Sudo on macOS

Re:Use TouchID to Authenticate Sudo on macOS by frutiger on Friday August 26, 2022 @04:59PM (#32612698)

> Does it make sense to use a password with -sk keys? I don't think it would make a difference either way.

Only if you want to protect your keys from being used by someone that has access to the private key + yubikey (i.e. someone physically present).

In other words, the -sk type private key is useless without the yubikey as well.

[ Parent | on HN ]

Re:Use TouchID to Authenticate Sudo on macOS by boustrophedon on Friday August 26, 2022 @05:14PM (#32612830)

Physical presence makes sense. I didn't really think it through but it's just the same as any other 2FA: you want something you know and something you have. Thanks.

[ Parent | on HN ]