6 ms·
hardware tokens are the way! Everyone has had a house key their whole lives, and understands how to keep a spare to prevent lock-outs.
by nmca 1y ago
hardware tokens are the way! Everyone has had a house key their whole lives, and understands how to keep a spare to prevent lock-outs.
- Muromec 1y agoIf only there was some kind of a physical tokem with a crypto key that is protected by a password and tied to one's bank account. -s
- craftkiller 1y agoThe only bit we're lacking is the "tied to one's bank account". The rest already exists in the form of yubikeys and other hardware security tokens.
- FateOfNations 1y agoYour bank/credit/debit/etc. card is a “physical token with a crypto key that is protected by a password and tied to one's bank account”. FIDO and EMV even both use the same underlying ISO/IEC 7816 and 14443 protocols for communications.
- craftkiller 1y agoAh! I forgot about my debit card. I only use it ~once per month. Yeah, we'd need an additional piece of hardware to be able to connect it to our computers but that also could enable doing chip-based transactions over the internet so I think it would absolutely be worth it.
- pasttense01 1y agoSome of us don't want to have a dozen plus separate physical tokens (one for each of bank/credit card/tax, etc sites with sensitive financial information we have).
- Muromec 1y agoOkay, I will make the "S" mark bigger next time.
- mixmastamyk 1y agoNot how it works. One key can keep dozens of entries.
- nmca 1y agoI know this was sarcasm, but bank card is not appropriate because you should have one hardware key for all services produced by an independent provider.
- Muromec 1y agoWhy would I want to have one key for all them? To lose access or get them all compromised at the same time?
- nmca 1y agoI think your threat model is bad — the isolation of accounts offers little and most people have effectively only the security of their email provider anyway. That said, buying several keys would be a natural and happy path solution for the paranoid. Make sure to get three for each account (same as primary) as either you need a backup or the extra key offers no extra security.
- fullstop 1y agoI know plenty of people who have lost house keys. I have many Yubikeys and I am responsible with my things, but not everybody is like us.
- rr808 1y agoHardware tokens are a PITA. Sure everyone has a house key because they only have a house at a time. I have 3 bank accounts, a few brokerage accounts, some pension logins on top of the regular stuff. I'm not going to carry 15 hardware tokens with me.
- nmca 1y agoYou only need one, plus a couple recovery spares, in any sane implementation.
- kube-system 1y agoSecurID tokens suck but with FIDO2, you'd only need one key. Of course, that breaks the UX analogy of the house key.