Zur Erklärung, YubiKeys können sich als Smartcard ausgeben. Innerhalb weniger Stunden kam es auf mehreren Macs mehrmals zu eingefrorenen Anmeldungen, die sich nur durch einen harten Reset der Maschinen, dem Abziehen der YubiKeys und dem manuellen Entfernen der Schlüssel-Hashs in der Konsole beheben ließen. Leider ist der Login über das PIV Protokoll auf M1 Macs unbrauchbar buggy. Prinzipiell ist der YubiKey extrem vielseitig und auch sehr einfach zu bedienen und zu konfigurieren. This is how I'd expect all services listed on the site to work and hence the 3 stars. Now props given where props are due, google supports the key properly which means when you type in the password, you need to plug the key in, touch the gold bit and it automagically does the authentication.
This method isn't all that secure, as if you click on a phishing url and not realise it, you can still easily allow an attacker to gain access to your account. The only difference is that you'd need to authenticate to the app with your yubikey and then you'd see the 6 digit code. This means that you still need to type in the 6 digit code which is the same as if you were using the google authenticator/ last pass authenticator app etc. My expectations were to have to plug the key in, touch the gold bit and use that as 2FA however a lot of the "supported" services rely on the yubikey authenticator app instead. Not all services advertised as working with yubikey actually work as expected. I had a look at the supported services before buying this key and my bad for just looking at the logos and not digging into all the instructions as that page is very misleading.
0 kommentar(er)
