pleroma.debian.social

Im thinking of picking up a totp physical key. Anyone got a recommendation? It must work with free software and preferably open hardware.

@hexmasteen Whats in the nitrokey 3? Should I wait too?

@hexmasteen I know yubikey recommends you buy 2 yubikeys (one as a backup). Is that the same for nitrokey? What happens if I lose my nitrokey?

@keverets it doesnt look like it supports ssh keys whereas the nitrokey does

@hexmasteen Any reason for choosing nitrokey over yubikey? Yubikey seems to have more features and is cheaper.

I would prefer open hardware but I am also a poor student. It's fine if yubikey still supports free software through and through.

@jakob @hexmasteen

I just ordered a starter nitrokey. I did some research and found some stuff about yubikey I didnt like. Ill write a blog post about it when my nitrokey comes.

I realized I can use ssh via gpg and all my otp secrets are encrypted via gpg. I guess the totp wont be generated on the device which is kind of insecure but I have too many accounts that wont fit on the key anyways.

I wont be using FIDO2 for anything.

Excited to use it!

@jakob @hexmasteen Thanks for the guidance guys! I didnt even know about nitrokey.