> while initially I thought it would be interesting to try, the only situation > when yubikey could actually improve security is having to boot a Qubes PC > under unavoidable surveilance.
came to the same conclusion - probably not worth the security tradeoff... Perhaps one can implement a 2FA solution for FDE using something like paperkey? It would still be the 'someone peeks over my shoulder in a cafe' kind of scenario, but without the USB compromise -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/a62b822e-04b8-04b6-42e0-93c4928fb0b6%40raphael-susewind.de. For more options, visit https://groups.google.com/d/optout.
