Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Wait, seriously? Not even the OpenPGP applet/with ykman configuration? In what modes does it do that? That’s send-it-back bad.


Certainly for the OpenPGP applet, require touch to sign/auth/enc was introduced with the Yubikey 4. For U2F touch is always required and you do get an option on the NEO to require touch for Yubico challenge/response. Not sure about the PIV or TOTP applets.


Dang, TIL; I could've sworn I've made that work on a NEO. PIV mode presumably also has forced touch/reauth for signing?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: