https://www.theverge.com/2019/1/8/18172193/yubico-security-key-lightning-connection-iphone-2fa-ces-2019
By Russell Brandom
The Verge
Jan 8, 2019
Yubico has announced a new version of its popular Security Key for use in
Lightning ports, the first such device to enable physical token authentication
for iPhones. The device also supports a USB-C connection.
Previously, the only way to connect a security key to an iPhone was over
Bluetooth, which suffered Bluetooth's normal usability issues as well as
potential security concerns around mistaken pairings. Android devices can also
pair over NFC, but that functionality is impossible under iOS's current NFC
restrictions.
"The industry has ended up with Bluetooth as the best way to connect with
iPhones," said Yubico SVP of product Jerrod Chong. "We felt that wasn't good
enough. If you want users to get over the hurdle of using a security device,
you have to solve that usability problem."
Security keys are physical devices used to log in to services, either as a
password replacement or a second factor. Because of the protocol used, it's far
more difficult to intercept codes in transit, making it significantly more
secure than a password or even a one-time code. Yubico already offers security
keys that connect over USB and NFC. As part of today’s announcement, Yubico is
also releasing an NFC-enabled version of its conventional USB Key.
[...]
--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
https://twitter.com/infosecnews_