[ale] Deal on yubikey HW for 2FA

[DJ-Pfulio]

Yubico has 4 other, more expensive, options for OATH-TOTP.
Suspect the HW cost difference is why they are pushing U2F.


On 10/04/2015 12:15 PM, James Sumners wrote:
> Yeah, it confounds me why they didn't just use the open TOTP protocol.
> Google Authenticator isn't hard to use. And there are others if you don't
> want to use Google's.
> 
> On Sunday, October 4, 2015, Jeremy T. Bouse <Jeremy.Bouse at undergrid.net>
> wrote:
> 
>> I've got an older Yubikey VIP that I believe the only thing I use it for
>> is PayPal. For everything else I have my 2FA handled by using either Google
>> Authenticator or Duo Security and I could honestly just move that down to
>> Duo as it can handle both for me. Cost is nothing more than the
>> smartphone/tablet I already own and always have handy nearby. If I site I
>> use supports 2FA it's enabled immediately and used along with the long
>> randomly generated password. Almost all of my servers with any outside
>> public access require Duo 2FA to login and pretty much use SSH identity
>> keys over v2 protocol to gain access.
>>
>> On 2015-10-04 01:14, DJ-Pfulio wrote:
>>
>>> Hope that nobody minds this ...
>>>
>>> Github and Yubico are pushing 2-Factor Authentication by making it VERY
>>> cheap.  $5 for a device + shipping and handling.  Limit 2; having 2 is a
>>> "best practice" to avoid issue if you loose one when traveling.
>>>
>>> The offer:
>>> https://www.yubico.com/github-special-offer/github-yubikey-special-offer/
>>>