Cloudflare Hardware Keys (Yubico Partnership) | Hacker News Reader

Cloudflare Hardware Keys (Yubico Partnership)

cloudflare.com

107 pointshugoromano39 comments

"Yubico has partnered with Cloudflare to offer its hardware authentication security keys — at prices as low as $10 per key — to Cloudflare customers." — Cloudflare Dashboard

Dangit! I just ordered a bunch for $WORK at full price a few days ago.

Any idea what the actual details are? I've just logged in to my account and had to "claim my offer" this then said I'd get an email from yubico. I just want to know the prices and what the limitations / difference to standard yubi keys are if there are any.

Yubico Security Key NFC at $10

Yubico Security Key C NFC at $11.60

Wow, nice pricing!

We have a lot of OG series and first gen NFC yubikeys floating around. So I had planned on moving my company to yubikey bio keys at the top of the year but this pricing on the basic keys might win out now.

Well, here's hoping cloudflare has plans to add an offering for the bio series in the future.

Can we buy keys for all users in our companies or just one per Cloudflare account?

You can buy up to 10 security keys with the offer. If you have multiple account administrators (separate email addresses) for your Cloudflare account, you can buy up to 10 security keys per administrator.

If you represent a larger organization with over 500 employees, you can get 50% off the first year of a 3+ year YubiEnterprise Subscription (no limits on keys for YubiEnterprise Subscription).

Awesome!

Even better news! For a limited time, we're excited to surprise you with an upgrade to our multi-protocol YubiKey 5 Series!

You are now eligible to purchase up to 10 individual YubiKey 5 NFC or YubiKey 5C NFC (minimum 2) starting as low as $10 USD.

More details: https://blog.cloudflare.com/making-phishing-defense-seamless...

$5 for two.

https://www.yubico.com/microsoft-ignite-yubikeyoffer2022/

Looks like the deal was so good it sold out.

> Thank you for the amazing response, Microsoft Ignite attendees! Due to overwhelming response to this special offer, our limited time offer and supply have been redeemed.

I think it got HN’d. I was able to snag it but their backend was clearly struggling.

Wow. I want to switch to Solo2 (but no piv/gpg yet). In lieu of that, I love my Yubikeys. This is easily the best "deal" I've ever gotten on a retail product ever, assuming they don't cancel me for not attending Ignite. Thanks for sharing!

Edit: -_-. Ignite hasn't even happened yet, bit amusing.

In good conscience, I can't take credit. I saw this...

https://news.ycombinator.com/item?id=33024333

Was that really working an hour ago? Shows "Offer expired" now.

It worked for me about a half hour after OP posted it.

Already expired :)

Been looking at getting a Yubikey but hadn't pulled the trigger. Today I was able to get 4 of them for $30 total.

Can the $10 keys be used for GPG and SSH key unlocking or just something web authn specific?

It's the "Yubico Security Key" (https://www.yubico.com/pt/product/security-key-nfc-by-yubico...) which supports: WebAuthn, FIDO2 CTAP1, FIDO2 CTAP2, Universal 2nd Factor (U2F). So, should work.

Just to clarify: they don’t have the GPG applet. They can do SSH auth via the new fido2 support, but not via older methods like x509 RSA keys or GPG-as-an-ssh-key

x509 certificates (PIV applet) can be elliptic as well, just to clarify.

True. I always forget because they can’t (to my knowledge) use ed25519, just ecdsa.

No, the e-mail i got from them say it is the Yubico 5 NFC or the Yubico 5C NFC

that does have PIV and PGP modules.

https://www.yubico.com/br/product/yubikey-5-nfc/ https://www.yubico.com/br/product/yubikey-5c-nfc/

You can use PIV for SSH just fine.

It's not OpenSSH's weird FIDO mode, but I don't like the FIDO mode anyway because it requires storing a file on the computer.

https://github.com/FiloSottile/yubikey-agent

They're the normal "Security Key NFC" version, so just FIDO2/WebAuthn uses. But you can generate FIDO2-based SSH hardware keys on them: https://news.ycombinator.com/item?id=31556130

I just got the email and they’re the full YubiKey 5/5C NFC ones, so this is actually a really good deal.

Yep I just got the email and it's an offer for the full yubikey 5/5c models

I'm assuming this is for the blue keys? Those go for ~30 EUR where I live.

It's sad to see an innovation driver like Cloudflare be incompatible with my conscience, but to then see another product that just raised retail prices be offered for a third of the market price exclusively there... meh.

the email i got when i applied say 5 nfc or 5c nfc, the black ones, not the blue.

https://www.yubico.com/br/product/yubikey-5-nfc/ https://www.yubico.com/br/product/yubikey-5c-nfc/

That's what I got.

Purchase up to TEN keys!

Comment above yours says NFC, so the black ones I think.

Seems they don't send the email deal right away, not for me anyway.

The Security Keys now also support NFC. https://www.yubico.com/products/security-key/

Have cloudflare IPO'd yet? I really like the cut of their jib.

Yes, September 13, 2019.

lookup $NET

Did Yubico need help clearing inventory due to passkeys?

Does that include the USB-A Nano keys?

Reply on news.ycombinator.com