Live data from Hacker News

Cloudflare Hardware Keys (Yubico Partnership)

cloudflare.com

11–20 of 41 posts

Re: Cloudflare Hardware Keys (Yubico Partnership)

#11

I'm assuming this is for the blue keys? Those go for ~30 EUR where I live. It's sad to see an innovation driver like Cloudflare be incompatible with my conscience, but to then see another product that just raised retail prices be offered for a third of the market price exclusively there... meh.

Comment above yours says NFC, so the black ones I think.

Seems they don't send the email deal right away, not for me anyway.

Re: Cloudflare Hardware Keys (Yubico Partnership)

#13
post #12

Can the $10 keys be used for GPG and SSH key unlocking or just something web authn specific?

They're the normal "Security Key NFC" version, so just FIDO2/WebAuthn uses. But you can generate FIDO2-based SSH hardware keys on them: https://news.ycombinator.com/item?id=31556130

Re: Cloudflare Hardware Keys (Yubico Partnership)

#15
post #12

Can the $10 keys be used for GPG and SSH key unlocking or just something web authn specific?

It's the "Yubico Security Key" (https://www.yubico.com/pt/product/security-key-nfc-by-yubico...) which supports: WebAuthn, FIDO2 CTAP1, FIDO2 CTAP2, Universal 2nd Factor (U2F). So, should work.

Re: Cloudflare Hardware Keys (Yubico Partnership)

#16
post #12

Can the $10 keys be used for GPG and SSH key unlocking or just something web authn specific?

It's the "Yubico Security Key" ( https://www.yubico.com/pt/product/security-key-nfc-by-yubico... ) which supports: WebAuthn, FIDO2 CTAP1, FIDO2 CTAP2, Universal 2nd Factor (U2F). So, should work.

Just to clarify: they don’t have the GPG applet. They can do SSH auth via the new fido2 support, but not via older methods like x509 RSA keys or GPG-as-an-ssh-key

Re: Cloudflare Hardware Keys (Yubico Partnership)

#17
post #16

Earlier quoted context omitted.

It's the "Yubico Security Key" ( https://www.yubico.com/pt/product/security-key-nfc-by-yubico... ) which supports: WebAuthn, FIDO2 CTAP1, FIDO2 CTAP2, Universal 2nd Factor (U2F). So, should work.

Just to clarify: they don’t have the GPG applet. They can do SSH auth via the new fido2 support, but not via older methods like x509 RSA keys or GPG-as-an-ssh-key

x509 certificates (PIV applet) can be elliptic as well, just to clarify.

Re: Cloudflare Hardware Keys (Yubico Partnership)

#18
post #7

Any idea what the actual details are? I've just logged in to my account and had to "claim my offer" this then said I'd get an email from yubico. I just want to know the prices and what the limitations / difference to standard yubi keys are if there are any.

Yubico Security Key NFC at $10 Yubico Security Key C NFC at $11.60

Can we buy keys for all users in our companies or just one per Cloudflare account?

Re: Cloudflare Hardware Keys (Yubico Partnership)

#19
post #16

Earlier quoted context omitted.

Just to clarify: they don’t have the GPG applet. They can do SSH auth via the new fido2 support, but not via older methods like x509 RSA keys or GPG-as-an-ssh-key

x509 certificates (PIV applet) can be elliptic as well, just to clarify.

True. I always forget because they can’t (to my knowledge) use ed25519, just ecdsa.

Re: Cloudflare Hardware Keys (Yubico Partnership)

#20
post #11

I'm assuming this is for the blue keys? Those go for ~30 EUR where I live. It's sad to see an innovation driver like Cloudflare be incompatible with my conscience, but to then see another product that just raised retail prices be offered for a third of the market price exclusively there... meh.

Comment above yours says NFC, so the black ones I think. Seems they don't send the email deal right away, not for me anyway.

The Security Keys now also support NFC. https://www.yubico.com/products/security-key/
Post reply on HN