Re: Tor exit nodes

[Luca Capello <luca@pca.it>]

Hi there,

On Mon, 16 Oct 2017 17:50:54 +0200, Giacomo Catenazzi wrote:
> On 15.10.2017 22:32, Luca Capello wrote:
> >> What is the
> >> advantage of Yubikey over Nitrokey, other than price?
> > 
> > Price does not matter in my case, and the killer feature a YubiKey 4 has
> > while the Nitrokey Pro is missing is U2F support (we use it at work for
> > e.g. our GitLab instance and soon the client management console will get
> > it as well, for all our clients).
> 
> Note: Yubikey 4 is vulnerable to a new bug. I have no information about
> library used by Nitrokey:
> 
> https://arstechnica.com/information-technology/2017/10/crypto-failure-cripples-millions-of-high-security-keys-750k-estonian-ids/

Yep, I read that as well.> 

> So better to generate the keys in a secure machine and upload them to
> Yubikey (and also Nitrokey Pro)

I could not agree more, and with a ChaosKey (or similar) it would be
better.

Thx, bye,
Gismo / Luca

Attachment: signature.asc
Description: PGP signature