Re: Two factor authentication for SSH with a YubiKey
Kathinka <[email protected]>
| Newsgroups | gmane.org.user-groups.linux.dunedin.general |
|---|---|
| Message-ID | <CAMWvXDb7+EJpasPNYaSJCvgsqSEsA2e7PLFOxSg2yUoH=-3vyg@mail.gmail.com> |
Aha, got it. Thanks Gene and Robin. Kathinka. On 5 September 2013 10:55, Gene <[email protected]> wrote: > A one-time password is a password that is good for a single use only > (compared to a "normal" password, which is good until changed). > Usually, a physical token (in this case a Yubikey) or text message is > used to create or receive a one-time password. > > It is used as an additional layer of security - an attacker would have > to compromise your password, AND your token or cellphone to gain > access to the service. > > The process of using tokens/text messages is often called "two-factor" > security - denoting that two things (or factors); a password and > token, are required for access. > > > On Wed, Sep 4, 2013 at 4:30 PM, Kathinka <[email protected]> wrote: >> This sounds like something about security and avoiding the current >> snoop-mania sold to the public and gullible politicians with the >> excuse of fear of terrorism but I don't get it: what are "one-time >> passwords" for? >> >> Kathinka. >> >> On 5 September 2013 10:15, Robin Sheat <[email protected]> wrote: >>> I got a YubiKey (which is a USB device that can do one-time passwords >>> using a few different methods), and wanted to use it with SSH instead of >>> just a password. >>> >>> So with an evening of playing, I got it working. This also allows for a >>> second method as a backup in case you lose the yubikey. I have it >>> working with the Google Authenticator app on Android. >>> >>> http://www.kallisti.net.nz/blog/2013/09/yubikey-logins-with-ssh/ >>> >>> Robin. >>> >>> _______________________________________________ >>> DunLUG mailing list >>> [email protected] >>> http://lists.ethernal.org/listinfo/dunlug >>> DunLUG Wiki - http://dunlug.kallisti.net.nz/ >> >> >> >> -- >> >> >> IMPORTANT: If you forward this e-mail please delete the forwarding >> history which includes my e-mail address. >> It's a courtesy to all of us who may not wish to have our e-mail >> addresses sent all over the world. Thank you. >> >> "A liberty is not the same as a right, because the latter entails a >> reciprocal obligation on someone else's part." Thomas Szasz >> >> _______________________________________________ >> DunLUG mailing list >> [email protected] >> http://lists.ethernal.org/listinfo/dunlug >> DunLUG Wiki - http://dunlug.kallisti.net.nz/ -- IMPORTANT: If you forward this e-mail please delete the forwarding history which includes my e-mail address. It's a courtesy to all of us who may not wish to have our e-mail addresses sent all over the world. Thank you. "A liberty is not the same as a right, because the latter entails a reciprocal obligation on someone else's part." Thomas Szasz _______________________________________________ DunLUG mailing list [email protected] http://lists.ethernal.org/listinfo/dunlug DunLUG Wiki - http://dunlug.kallisti.net.nz/