Re: [qubes-users] Soft U2F in Qubes?

2017-07-25 Thread Rusty Bird
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Micah Lee: > How hard would it be to build a Qubes version of Soft U2F that stores > the secret in a separate VM, similar to split gpg? This could make using > U2F much more usable and secure inside of Qubes, I think. I suppose the most secure way

[qubes-users] Soft U2F in Qubes?

2017-07-25 Thread Micah Lee
GitHub has released an interesting piece of Mac software called Soft U2F: https://githubengineering.com/soft-u2f/ It's basically a virtual security key, and it stores its secret in the macOS keyring. When you login to a website with 2FA, instead of using a physical USB security key, you just