Re: Two factor authentication for SSH with a YubiKey

A one-time password is a password that is good for a single use only
(compared to a "normal" password, which is good until changed).
Usually, a physical token (in this case a Yubikey) or text message is
used to create or receive a one-time password.

It is used as an additional layer of security - an attacker would have
to compromise your password, AND your token or cellphone to gain
access to the service.

The process of using tokens/text messages is often called "two-factor"
security - denoting that two things (or factors); a password and
token, are required for access.


On Wed, Sep 4, 2013 at 4:30 PM, Kathinka <[email protected]> wrote:
> This sounds like something about security and avoiding the current
> snoop-mania sold to the public and gullible politicians with the
> excuse of fear of terrorism but I don't get it:  what are "one-time
> passwords" for?
>
> Kathinka.
>
> On 5 September 2013 10:15, Robin Sheat <[email protected]> wrote:
>> I got a YubiKey (which is a USB device that can do one-time passwords
>> using a few different methods), and wanted to use it with SSH instead of
>> just a password.
>>
>> So with an evening of playing, I got it working. This also allows for a
>> second method as a backup in case you lose the yubikey. I have it
>> working with the Google Authenticator app on Android.
>>
>> http://www.kallisti.net.nz/blog/2013/09/yubikey-logins-with-ssh/
>>
>> Robin.
>>
>> _______________________________________________
>> DunLUG mailing list
>> [email protected]
>> http://lists.ethernal.org/listinfo/dunlug
>> DunLUG Wiki - http://dunlug.kallisti.net.nz/
>
>
>
> --
>
>
> IMPORTANT: If you forward this e-mail please delete the forwarding
> history which includes my e-mail address.
> It's a courtesy to all of us who may not wish to have our e-mail
> addresses sent all over the world.  Thank you.
>
> "A liberty is not the same as a right, because the latter entails a
> reciprocal obligation on someone else's part."  Thomas Szasz
>
> _______________________________________________
> DunLUG mailing list
> [email protected]
> http://lists.ethernal.org/listinfo/dunlug
> DunLUG Wiki - http://dunlug.kallisti.net.nz/

_______________________________________________
DunLUG mailing list
[email protected]
http://lists.ethernal.org/listinfo/dunlug
DunLUG Wiki - http://dunlug.kallisti.net.nz/