I was surprised when switching to U2F authentication that I can only register one key on my AWS root account. If I lose that one single hardware key I'm in for a world of pain. Why half-ass such an important feature. Things like this make me look for alternative providers that take security more seriously.
I can perhaps see the logic for not supporting multiple U2F devices that could each be used independently, but surely if that was the reason they would enable people to use m of n devices if they weren't, as you say, being half-assed about it.
3 comments
[ 24.0 ms ] story [ 421 ms ] thread