reopen 848327 block 824532 by 846359 user product...@infomaniak.com usertag 824532 + infomaniak.com-authentication thanks
Hi there, sorry for the late reply, the package was rejected: <http://lists.alioth.debian.org/pipermail/pkg-auth-maintainers/Week-of-Mon-20161212/000953.html> On Fri, 16 Dec 2016 11:58:51 +0100, Nicolas Braud-Santoni wrote: > I am looking for a sponsor for my package "libu2f-host": Nicolas, as a (new) member of the pkg-auth team, I can sponsor you without the need to file RFS bugs for that. However, can you first push your changes to the Git repository on Alioth? I find awkward not to use it for Debian work... <https://anonscm.debian.org/cgit/pkg-auth/libu2f-host.git/> > This updates brings: > - - a fix for #846358, so that rules for the right udev version are installed; > - - as per #846359 and #824532, this creates a new binary package, > libu2f-common, containing the udev rules; > - - the new upstream version brings udev rules for additional devices. Sorry, I still do not see the reasoning behing such a move: <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=824532#42> Mickael or Martin (both Bcc:ed), can you elaborate a bit more, please? Yes, I have read the full bug and I fully agree with Robert and Simon (both Bcc:ed), moreover: 1) U2F devices are seen as *keyboards*, not a special U2F *device* (please anyone correct me if I am wrong), and udev already contains exceptions with more-specific devices like iDRACs... 2) U2F devices are becoming more and more frequent and they are considered by at least Google (who, to be fair, co-developed the standard) to be the more secure 2FA mechanism: <http://arstechnica.com/security/2016/12/this-low-cost-device-may-be-the-worlds-best-hope-against-account-takeovers/> <http://fc16.ifca.ai/preproceedings/25_Lang.pdf> 3) some of them are even more than that (e.g. the YubiKey 4 which also contains an OpenPGP smartcard), which justify the fact that udev rules do not belong to any U2F-specific package: <https://wiki.debian.org/Smartcards/YubiKey4#udev> FYI, IMHO this is a udev upstream bug. Thx, bye, Gismo / Luca -- Luca Capello Administrateur GNU/Linux Infomaniak Network SA
signature.asc
Description: Digital signature
