Re: Tor exit nodes

[Theodore Ts'o <tytso@mit.edu>]

On Mon, Oct 09, 2017 at 04:44:29PM +0200, W. Martin Borgert wrote:
> I'ld go for something more or less free, if possible. What is the
> advantage of Yubikey over Nitrokey, other than price? YubiKey 4 is
> 40 USD, Nitrokey Pro is 49 Euro in their respective online shops.
> 
> (I'm biased towards Nitro, because it says "Made in Berlin" and
> I'm made there, too.)

Reports on the web is that Yubikey is faster, and environmentally more
robust.  I also like the Yubikey nano because it can stay permanently
in a USB slot, and that scores huge wins for convenience, which is
useful if you want to use it for all of your ssh needs.

If you want to use a hardware crypto device just for signing packages,
then needing to insert a bulky hardware crypto device just before you
upload a release to kernel.org or the Debian archives is probably OK.
But depending on how often you use ssh, it's probably much less
usable.  So a lot depends on your use case.

	      	  	     	      - Ted