AquaL1te wrote:
Hi, I use my NEO with the Android apps OpenKeychain for GPG and Yubico Authenticator to store time based OTP. For these services I need to provide a pin (GPG) or password (Authenticator) with the NFC. Now I wonder if faulty password attempts are logged, just as with the gpg-agent on my Linux system, after 3 attempts the key blocks. I'm not sure if NFC can also do this. Of course I can test this, but I rather not. I can't find any documentation about this. Can anyone comment on this and preferably also provide a source?
I just did a test and yes if you enter a wrong pin code via NFC then the password counter decreases. One correct pin code entry via NFC or via USB is enough to reset the password counter. Great stuff! I don't think there is a password counter for the OTP via NFC, but there is also no password for USB of course. But having a password on NFC OTP still seems a good choice, even though unlimited password attempts are probably allowed.