Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 1:27 pm

All times are UTC + 1 hour




Post new topic Reply to topic  [ 3 posts ] 
Author Message
PostPosted: Tue Jun 10, 2008 7:00 am 
Offline

Joined: Tue Jun 10, 2008 6:54 am
Posts: 1
Location: Melbourne, Australia
On the login form of the server, the input type is specified as "yubikey". Is it necessary to use this instead of "password"? Apart from being non-standard, it also gives you a long, ugly list of OTPs in your browser.


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Tue Jun 10, 2008 8:08 am 
Offline
User avatar

Joined: Wed May 07, 2008 5:25 pm
Posts: 110
Location: Sunnyvale, California
Yes we need to improve the aesthetics in that part.

IMHO a YubiKey is like an ATM card:

[1] Insert it to the ATM or a service provider, it validates the token, knows who you are by linking the device ID to a user.

[2] Then ask for your PIN

The experience should be just like ATM to avoid any learning curves. But we are not doing it now since
Yubico's web designer just left Yubico for a "real" artistic design job.

_________________
The YubiKey Server Guy


Top
 Profile  
Reply with quote  
PostPosted: Tue Jun 10, 2008 9:20 am 
Offline
Site Admin
Site Admin

Joined: Tue May 06, 2008 7:22 pm
Posts: 151
The input type should not be 'yubikey', that would be an HTML error. Here are the tricks I've used for the demo server:

1) Auto-focus. Label the form, and use this:
Quote:
<body onLoad="document.login.key.focus();">


2) Autocomplete off. Passwords are typically remembered by the browser, which we don't want. Add autocomplete=off to the input field.

I think there was a third item to keep in mind, but I can't recall it now...

Thus, the State of The Art Yubico-Compliant HTML input from page will look something like:

Code:
<html>
 <body onLoad="document.login.key.focus();">
  <form name="login">
   <input  autocomplete="off" type="password" name="yubikey">
   <input type=submit>
  </form>
 </body>
</html>


Of course, the auto-focus may not always be applicable. On the forum, I think it would interfere with the forum auto-focus design.

Hope this helps.

/Simon


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 3 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: YahooSeeker [Bot] and 4 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group