undefined | Better HN

0 pointsxaduha5y ago0 comments

BTW both PIV and GPG in Yubikeys are just applets and not particularly suited for SSH use either. Proper applet for it is this one https://github.com/philipWendland/IsoApplet, if you can install it of course.

Some get confused or have bad associations when hearing the word 'applet', but that is what they are, as in 'Java applet'.

This one is too https://developers.yubico.com/ykneo-oath/Releases/

0 comments

3 comments · 1 top-level

knorker5y ago· 2 in thread

What makes you say it's not particularly suited for SSH?

xaduhaOP5y ago

Because they were made for a different purpose, with extra hoops you need to jump through.

knorker5y ago

U2F was made for a different purpose too.

I don't see what's so extra hoop-y about telling SSH "use key from industry standard PKCS#11". That's literally what it's there for, and when Yubico added PIV support that instantly added support to multiple operating systems (incl Linux & Windows) where SSH keys "just work".

I can take a yubikey today from my Linux system, plug it into a Windows machine, and Putty with wincrypt support "just works". Because that's how it was designed.

1 more reply

j / k navigate · click thread line to collapse