I had it set up across a few services and apps, before I came to my senses and 
stopped doing that. It was fun, though, and I probably wouldn't be as informed 
if I hadn't purchased those Ubikeys for real cheap when Cloudflare were 
offering them at a deep discount. Ubikeys offers more than just the U2F you're 
talking about; they could also do SSH authentication, and OTP based on tapping 
the sensor (which emulates a keyboard to type one-time codes). It could also be 
made to work like an integrated smartcard, allowing you to require the device 
be connected to log on to the Mac.

The primary problem is, of course, that you've transferred liability onto a 
physical device, with no hope of recovery just using information stored in your 
head; that translates to a responsibility for you always to record two copies 
of every U2F login. And most keys can't store more than a couple dozen entries, 
so really, you want a password manager (for which you will have the credential 
stored on your key) and passkeys (which are just an honest concession to 
pragmatism and essentially replace the hardware key with software that performs 
the same function).

Cheers,
Sabahattin

-- 
The following information is important for all members of the Mac Visionaries 
list.

If you have any questions or concerns about the running of this list, or if you 
feel that a member's post is inappropriate, please contact the owners or 
moderators directly rather than posting on the list itself.

Your Mac Visionaries list moderator is Mark Taylor.  You can reach mark at:  
[email protected] and your owner is Cara Quinn - you can reach Cara at 
[email protected]

The archives for this list can be searched at:
http://www.mail-archive.com/[email protected]/
--- 
You received this message because you are subscribed to the Google Groups 
"MacVisionaries" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion visit 
https://groups.google.com/d/msgid/macvisionaries/43B81D47-6928-43F0-B0B8-E58933049C5D%40me.com.

Reply via email to