* Petr Pisar: > V Fri, Jun 12, 2026 at 01:47:27PM +0200, Florian Weimer napsal(a): >> Token2 sells something that has 100 slots, with the appropriate >> interface to select it. > > <https://www.token2.com/shop/product/pin-release3-3-usb-a-nonbranded-fido2-u2f-and-totp-security-key-with-pin-complexity-feature> > claims "Maximum OTP Profiles: 50 TOTP/HOTP via the app + 1 HOTP via HID" which > can mean anything, including that the seeds are stored in the application and > encrypted with a key stored in the token, which I wouldn't be surprised > because they cost "only" 22 EUR.
There's also the Molto-2-v2. It looks quite promising, but I have not used it. > Finaly all these modern USB-powered TOTP generators have a problem that they > lack a clock. Therefore they will never provide the off-line experience. It has an RTC battery, too. > While FIDO2 looks good (I don't know how mich it is independent from web > browsers), I'm wary to invest into it as the prospect are not clear. Besides > it needs maintaing yet another software stack, it can happen that FIDO2 dies > out because governments have one foot in smart cards and the other foot > explores mobile phone enclaves, completely ignoring FIDO2. There's also the matter of PCQ requirements. For something that is mostly a compliance exercise, that's relevant even for those of us who generally do not believe in PQC. Thanks, Florian -- _______________________________________________ devel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
