Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

It’s not HTTP - the design uses a much smaller binary protocol (hardware tokens are very constrained) called CTAP:

https://fidoalliance.org/specs/fido-v2.0-id-20180227/fido-cl...

OpenSSH uses that protocol to request encryption operations. Mutt could do that the same way but it’d need a server which supports the same crypto algorithm FIDO2 specifies. That’d be great but also somewhat pointless if you’re using Yubikeys which support x509 auth which IMAP and SMTP have supported for decades.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: