I use it to secure a web app. I’ve customized the instance so that when the validation succeeds, it returns an encryption key used to encrypt the data in the database. The idea was to keep the encryption key off of the app server save for mem in session. This key functionality is why I’m using it rather than the Yubico provided service. It’s an internal app not exposed to the net.

It’s not using the sync service and the server is ip locked via iptables.

Thanks for the info.