Re: TOTP apps, and WebAuthn recommended devices?

2023-03-26 Thread Taylor R Campbell
> Date: Sat, 25 Mar 2023 08:36:36 -0400 > From: Greg Troxel > > Thanks very much for the detailed response. > > One thing that's not 100% clear to me: > > One device (plus a second one as a backup!) > > > A device can fail or be lost, so the backup concept is obvious, and > perhaps should

Re: TOTP apps, and WebAuthn recommended devices?

2023-03-25 Thread Martin Husemann
On Sat, Mar 25, 2023 at 02:45:46AM +, Taylor R Campbell wrote: > [3] If you use FIDO-with-PIN instead of password+FIDO for anything, > then the FIDO key does become a single point of failure -- and the > compatibility and user experience is worse. So I advise you avoid > that.

Re: TOTP apps, and WebAuthn recommended devices?

2023-03-25 Thread Greg Troxel
Thanks very much for the detailed response. One thing that's not 100% clear to me: One device (plus a second one as a backup!) A device can fail or be lost, so the backup concept is obvious, and perhaps should extend to a third. Are the backup devices independent in that you enroll

Re: TOTP apps, and WebAuthn recommended devices?

2023-03-25 Thread Taylor R Campbell
> Date: Thu, 23 Mar 2023 09:51:17 -0400 > From: Greg Troxel > > One thing is TOTP. There are Android apps from f-droid (which suits me > but not everyone), and there is vaultwarden which should allow bitwarden > to do TOTP. I wonder if there are good TOTP programs in pkgsrc and what > people

Re: TOTP apps, and WebAuthn recommended devices?

2023-03-24 Thread beepc.ch
On 23.03.23 14:51, Greg Troxel wrote: 2FA is increasingly required, which is fine, but I wonder about strategies for coping as a NetBSD user. One thing is TOTP. There are Android apps from f-droid (which suits me but not everyone), and there is vaultwarden which should allow bitwarden to do

Re: TOTP apps, and WebAuthn recommended devices?

2023-03-24 Thread Rhialto
On Thu 23 Mar 2023 at 09:51:17 -0400, Greg Troxel wrote: > 2FA is increasingly required, which is fine, but I wonder about > strategies for coping as a NetBSD user. > > One thing is TOTP. There are Android apps from f-droid (which suits me > but not everyone), and there is vaultwarden which

Re: TOTP apps, and WebAuthn recommended devices?

2023-03-24 Thread Steffen Nurpmeso
Martin Neitzel wrote in <20230323215020.d73d124...@marshlabs-mx.gaertner.de>: ... |# and if it's the last thing we ever do... The Cure fan? |# 2FA -- 2 Factor Audio, here's the 2nd factor: |# https://www.youtube.com/watch?v=lsuQO77n9SE I hope i have not to "say hello" to all this. --End

Re: TOTP apps, and WebAuthn recommended devices?

2023-03-24 Thread Dave B
On Thu, Mar 23, 2023 at 03:23:40PM +, Stephen Borrill wrote: > On Thu, 23 Mar 2023, Greg Troxel wrote: > > 2FA is increasingly required, which is fine, but I wonder about > > strategies for coping as a NetBSD user. > > > > One thing is TOTP. There are Android apps from f-droid (which suits

Re: TOTP apps, and WebAuthn recommended devices?

2023-03-23 Thread Martin Neitzel
> I wonder if there are good TOTP programs in pkgsrc and what > people recommend. I'm a happy user of "oath-toolkit', too. I wrapped that into a small shell script which lets me easily select any of the few TOTP secrets I have collected so far. It also tracks the token changes on the full and

Re: TOTP apps, and WebAuthn recommended devices?

2023-03-23 Thread Stephen Borrill
On Thu, 23 Mar 2023, Greg Troxel wrote: 2FA is increasingly required, which is fine, but I wonder about strategies for coping as a NetBSD user. One thing is TOTP. There are Android apps from f-droid (which suits me but not everyone), and there is vaultwarden which should allow bitwarden to do

Re: TOTP apps, and WebAuthn recommended devices?

2023-03-23 Thread David Brownlee
On Thu, 23 Mar 2023 at 13:51, Greg Troxel wrote: > > 2FA is increasingly required, which is fine, but I wonder about > strategies for coping as a NetBSD user. > > One thing is TOTP. There are Android apps from f-droid (which suits me > but not everyone), and there is vaultwarden which should

Re: TOTP apps, and WebAuthn recommended devices?

2023-03-23 Thread Martin Husemann
On Thu, Mar 23, 2023 at 09:51:17AM -0400, Greg Troxel wrote: > It looks like the Yubikey 5 might fit the bill. I am totally happy with my Yubikey and its usage in NetBSD and Firefox (but I use 10_BETA and -current, though that probably only makes a difference for the ssh usage). I am regularily

TOTP apps, and WebAuthn recommended devices?

2023-03-23 Thread Greg Troxel
2FA is increasingly required, which is fine, but I wonder about strategies for coping as a NetBSD user. One thing is TOTP. There are Android apps from f-droid (which suits me but not everyone), and there is vaultwarden which should allow bitwarden to do TOTP. I wonder if there are good TOTP