Hacker News Reader

I agree it's annoying. They're working on it, but they should have really enabled it sooner. There's no technical reason, iPhone has the necessary NFC hardware. https://www.wired.com/story/yubikey-lightning-ios-authentica...

View on HN

Their main page for mobile heavily implies they are already there with iPhone/NFC.

https://www.yubico.com/products/yubikey-for-mobile/

Actually, you're right - that capability has apparently been available since last year: https://www.yubico.com/2018/05/yubikey-comes-to-iphone-with-.... The link I cited is for lightning-connected Yubikey hardware, which is supposed to come out this year.

Interesting link, thanks!

For the time being, passphrases + TOTP 2F are sufficient, but I will look forward to being able to use a security key instead.

U2F is fundamentally quite a bit more secure than TOTP - you probably already know this, but just to clarify for those reading.

>U2F is fundamentally quite a bit more secure than TOTP - you probably already know this, but just to clarify for those reading.

Yes, IIRC it's impossible (or nearly so) to phish U2F.

Reply on news.ycombinator.com