YubiKey. Should I purchase it?

[mangomango]

@Lukas

YubiKey doesn’t encrypt the secrets, at least as far as I know, would be happy to be proven wrong.

Does anyone know what he refers to ? @Lukas
It may be a reason to not buy it

[bitsondatadev (Brian "bits" Olsen)]

I woke up today and I just decided I want to dip my toe in an open source key and due to this potentially misleading flag with solo key:

@jonah

I only see their original Solo products (the Solo, Solo Tap, and the even older Somu) listed here: FIDO® Certified - FIDO Alliance (search Company: SoloKeys)

I don’t like this a lot because I think they are being misleading in using the Fido Certified badge. The Solo 2 is basically entirely different from the original product, so why would their original certification apply to it?

and because Jonah didn’t specifically say no to only key :

@jonah

I would point out that because I/we stopped looking at OnlyKey because of this issue, there may be additional problems that we just did not uncover or discuss. I can’t really say either way whether there are additional concerns on our end

and because @Lukas is the only key number 1 fan:

@Lukas

Proprietary and blocks the ability to update firmware.

I would recommend getting an OnlyKey if it fits your needs:

1. Open source.
2. Has upgradable firmware.
3. Has a physical numpad to protect your secrets with a PIN.

I think I’m gonna overlook the clear issues with being able to backup the security key and just get an OnlyKey.

Gonna live a little.

[bitsondatadev (Brian "bits" Olsen)]

Mini bummer, no NFC. Now I must plug it into my phone and computer like a commoner.