Comment by lxgr
7 days ago
> I have been using multiple Yubikeys for... 8 years now I think? I don't remember the last time I enrolled and important key.
This probably makes your use case somewhat unusual...
> I actually do have multiple Yubikeys, one of which is stored away.
...and this probably puts you in the 0.0001th or so percentile of users. It's really a great security strategy if you can pull it off, but practically almost nobody can.
Not sure what you mean. "Normal people" have to enroll important keys much more often, and cannot use multiple Yubikeys?
My feeling would be that "normal people" can always recover their accounts from their main email, which makes the main email the only "important" account. So having a Yubikey always plugged in is a "nice convenience".
Now to be honest, I would expect that "normal people" are absolutely fine with passkeys on their smartphone, and don't consider it a "trap".
I would just expect that people who consider it a trap are able to use a Yubikey the way I do.
> I would just expect that people who consider it a trap are able to use a Yubikey the way I do.
I think the people most likely to be hurt by it being a trap are unfortunately those least likely to be able to juggle multiple Yubikeys.