Hacker News Reader

+ It is (fully) open source

- Doesn't support U2F (yet)

- Supports only one password manager [1]

- Recommends using their own password manager (That has a limit of 16 passwords)

[1] https://www.nitrokey.com/documentation/applications#a:passwo...

Unfortunately it's not _fully_ open source. They don't say it anywhere on their webpage, but they use an [OpenPGP Smart Card](https://www.g10code.com/p-card.html) internally, where some of the implementation by ZeitControl isn't open source. g10 has a reference implementation that is fully open source, but there's some additional (timing?) attacks that Zeitcontrol has implemented and cannot release.

Note the NitroKey start is a gnuk implementation and is fully open source. The tamper-resistant models are using the BasicCard with Zeitcontrol software.

Reply on news.ycombinator.com