Post #963321

A few weeks ago I finally changed my #SSH key(s) on my #YubiKey(s) from the old PIV function to a #FIDO2 key using @jgoerzen 's excellent guide: https://www.complete.org/easily-using-ssh-with-fido2-u2f-hardware-security-keys/ It is so much better! It does not regularly fail, the credentials in the ssh-agent don't need re-adding on any failed auth. The flow of when I forgot the ssh-add call is so much better as you can just type the password. And while my keys are too old to support ed25519 at least it's no longer a short RSA.