[arin-ppml] 2fa/FIDO2: Will you allow MULTIPLE HW keys?

[John Sweeting]

John and all

Any key following the FIDO2 standards should work. ARIN will only support one hardware key initially but will expand to multiple keys over time. It is crucial that people take good care of maintaining their recovery codes as that will be the best way to self-cure. Anyone having suggestions for improving this service please use the ARIN ACSP so that it can be further discussed with the community.

Thanks


From: John Springer <3johnl at gmail.com>
Date: Thursday, December 1, 2022 at 11:53 PM
To: John Sweeting <jsweeting at arin.net>
Cc: Larry Rosenman <ler at lerctr.org>, "arin-ppml at arin.net" <arin-ppml at arin.net>
Subject: Re: [arin-ppml] 2fa/FIDO2: Will you allow MULTIPLE HW keys?

Hi John, Larry, all

The initial implementation will only support a (what kind of) single key? Having struggled with this a bit, and as I'm sure you know, various vendors support variations.

Does ARIN mean one (1) Yubikey? Or one (1) any kind of FIDO2 key? Or the latter with exceptions? And if only one Yubikey, the extra effort to do two (2) might be smol?

Springer

On Thu, Dec 1, 2022 at 13:43 John Sweeting <jsweeting at arin.net<mailto:jsweeting at arin.net>> wrote:

On 12/1/22, 4:17 PM, "ARIN-PPML on behalf of Larry Rosenman" <arin-ppml-bounces at arin.net<mailto:arin-ppml-bounces at arin.net> on behalf of ler at lerctr.org<mailto:ler at lerctr.org>> wrote:

    Question: When FIDO2 is implemented, will someone be able to add
    MULTIPLE hardware keys?

The initial implementation will only support a single key. If the community wishes ARIN to support multiple hardware keys please consider submitting that desire through the ARIN ACSP process.

    I.E. I have a YubiKey and a TItan Key.


    --
    Larry Rosenman                     http://www.lerctr.org/~ler
    Phone: +1 214-642-9640                 E-Mail: ler at lerctr.org<mailto:ler at lerctr.org>
    US Mail: 5708 Sabbia Dr, Round Rock, TX 78665-2106<https://www.google.com/maps/search/5708+Sabbia+Dr,+Round+Rock,+TX+78665-2106?entry=gmail&source=g>
    _______________________________________________
    ARIN-PPML
    You are receiving this message because you are subscribed to
    the ARIN Public Policy Mailing List (ARIN-PPML at arin.net<mailto:ARIN-PPML at arin.net>).
    Unsubscribe or manage your mailing list subscription at:
    https://lists.arin.net/mailman/listinfo/arin-ppml
    Please contact info at arin.net<mailto:info at arin.net> if you experience any issues.

_______________________________________________
ARIN-PPML
You are receiving this message because you are subscribed to
the ARIN Public Policy Mailing List (ARIN-PPML at arin.net<mailto:ARIN-PPML at arin.net>).
Unsubscribe or manage your mailing list subscription at:
https://lists.arin.net/mailman/listinfo/arin-ppml
Please contact info at arin.net<mailto:info at arin.net> if you experience any issues.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.arin.net/pipermail/arin-ppml/attachments/20221202/da482182/attachment.htm>