Yubico Forum

Some ways a javascript version could be implemented:

As a direct authentication method for web servers that natively support serverside javascript such as Aptana's Jaxer, or the Firefox extension Plain Old Webserver.

Also, as the authentication part of the code for a Firefox extension that adds the Yubikey as "something you have" multi-factor capability to the Master Password input that protects all the saved passwords in Firefox. I think this would require expert knowledge, which I do not have

----------------
Now playing: ABC Radio Online - Dr Karl - Science on TripleJ Mornings 2008-05-29
via FoxyTunes

You are right that there are many kinds of shapes and forms that an OTP can be generated. And a web-based way or software tokens are highly desirable in some scenarios. But my opinion is that YubiKey is probably the easiest way and the most worry-free compromise that you don't need to worry much about many security challenges in software-based and Internet-based implementations.

Paul

_________________
The YubiKey Server Guy

I'm sorry I wasn't referring to a script-based implementation of a OTP. I was asking for a javascript implementation, or port, of the client library for Yubikey verification.

I don't know of a javascript-implementation of the library. You will need to retrieve a HTTP URL from javascript, and some string parsing to parse the response according to our protocol:

http://yubico.com/developers/api/

Bonus points for verifying the HMAC-SHA1 signature against a shared secret.

If you or anyone comes up with any code to do this, I'm sure it will be appreciate by someone in the future!

/Simon