Am 24.06.24 um 09:48 schrieb Mattia Verga via devel:
That said, even if the token is stored in the password manager, it is
not cushy to be used with kerberos. I have been using 2FA for over a
year now and I get used to, but it's clumsy to use it in Fedora
infrastructure. I'd really like if we can move everything related to 2FA
to use a yubikey or something like that, so that users could just
authenticate by having their key inserted in a USB port.

YubiKeys have two disadvantages:

1. You need to buy one (and not loose them). Sure, they aren't overly
expensive, but it's also not free.
2. It's either a hazzle of constantly need to plug it in, or you take up
a USB port. And on a Laptop that is always kinda awkward (besides the
fact that a lot of modern Laptops don't have a lot of ports).

YubiKeys have ofc a lot of other advantages, but (as always) it's a
tradeoff.


Kilian
--
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to