I have recently started using Yubikeys. I sadly have to use TOTP along with U2F on services I need to access on my iPhone (G Suite for example). This leaves TOTP as the weakest link on those services. Hopefully it won’t be long before I can stop using TOTP completely on services that support U2F.
This seems like a terrible idea. If it takes off anyone stealing your phone can just also steal the key, since you are likely to be carrying them both with you
3 comments
[ 3.6 ms ] story [ 11.7 ms ] threadclaiming that you could pair with the "soundbar rather than your smartphone" is frankly silly
apple I would have hoped would adopt a security standard rather than charging a MFI fee