Google Titan Security Key

Post by raesene9 » Thu, Jul 26, 2018, 11:38 AM UTC

chillydawg wrote: post #25

raesene9 wrote: post #13

The thing that makes me a bit jumpy about hardware 2FA with things like this or a Yubikey is around what happens if I lose it or it breaks. It's not so much a problem in a corporate setup (like internally at Google) where you could go to a central admin team to revoke/replace the key. But if you're a home user using this for a wide variety of sites and the token fails then the failure mode seems to be "go figure out…

With yubikeys, you can effectively clone them when setting them up initially. So you carry one and keep another spare in a safe location. If your primary fails, you can buy another and promote your hot standby to primary having set the new one up to be a clone.

Post by chillydawg » Thu, Jul 26, 2018, 12:05 PM UTC

raesene9 wrote: post #31

chillydawg wrote: post #25

Earlier quoted context omitted.

With yubikeys, you can effectively clone them when setting them up initially. So you carry one and keep another spare in a safe location. If your primary fails, you can buy another and promote your hot standby to primary having set the new one up to be a clone.

Ahh that is interesting! Do you know is there a doc. on how that's done? Also does that mean that once the clone is done you can effectively just register once with your "live" key and if it fails seemlessly use the "backup" key or do you need to register with both for that to work?

Post by zaarn » Thu, Jul 26, 2018, 1:20 PM UTC

dogma1138 wrote: post #34

zaarn wrote: post #23

Quite neat. Though I'm still dissapointed in the U2F/Security Key market. The Yubico's cost 50€ the piece or 20€ for the U2F key only. And to get NFC usage you have to buy a worse variant of the other keys that doesn't support 4096bit RSA and some other features. There is not much competition either, Nitro is just as expensive and doesn't feature a good and cheap key either. Open Source variants are also fairly rare,…

To be fair for home usage a soft-token is just as good and you can back it up by backing up the seed. If your phone is compromised by someone who can exploit it then your adversarial outlook is pretty dire to begin with.