Yubico Forum https://forum.yubico.com/ |
|
Password counter for NFC? https://forum.yubico.com/viewtopic.php?f=26&t=2561 |
Page 1 of 1 |
Author: | AquaL1te [ Wed Feb 08, 2017 10:54 am ] |
Post subject: | Password counter for NFC? |
Hi, I use my NEO with the Android apps OpenKeychain for GPG and Yubico Authenticator to store time based OTP. For these services I need to provide a pin (GPG) or password (Authenticator) with the NFC. Now I wonder if faulty password attempts are logged, just as with the gpg-agent on my Linux system, after 3 attempts the key blocks. I'm not sure if NFC can also do this. Of course I can test this, but I rather not. I can't find any documentation about this. Can anyone comment on this and preferably also provide a source? |
Author: | AquaL1te [ Sat Feb 11, 2017 6:08 pm ] |
Post subject: | Re: Password counter for NFC? |
AquaL1te wrote: Hi, I use my NEO with the Android apps OpenKeychain for GPG and Yubico Authenticator to store time based OTP. For these services I need to provide a pin (GPG) or password (Authenticator) with the NFC. Now I wonder if faulty password attempts are logged, just as with the gpg-agent on my Linux system, after 3 attempts the key blocks. I'm not sure if NFC can also do this. Of course I can test this, but I rather not. I can't find any documentation about this. Can anyone comment on this and preferably also provide a source? I just did a test and yes if you enter a wrong pin code via NFC then the password counter decreases. One correct pin code entry via NFC or via USB is enough to reset the password counter. Great stuff! I don't think there is a password counter for the OTP via NFC, but there is also no password for USB of course. But having a password on NFC OTP still seems a good choice, even though unlimited password attempts are probably allowed. |
Page 1 of 1 | All times are UTC + 1 hour |
Powered by phpBB® Forum Software © phpBB Group https://www.phpbb.com/ |