Conversation

Notices

1. Embed this notice
   Zack (zack@ioc.exchange)'s status on Thursday, 08-Sep-2022 21:22:43 JST Zack

   Deat Fediverse,

   Have you used, worked with, maybe tested, #Nitrokey ?

   #token
   #authentication
   #hardware
   #passwordless
   #FIDO2
   #FIDO_U2F
   #2FA

   Are they reliable?

   Do you use alternatives?

   • Embed this notice
     Nitrokey (nitrokey@social.nitrokey.com)'s status on Thursday, 08-Sep-2022 21:22:31 JST Nitrokey

     in reply to

     • Jonas Vautherin

     @jonasvautherin @zack No worries, Nitrokey 3 production and firmware development is making good progress recently. See our latest status update. https://www.nitrokey.com/blog

   • Embed this notice
     Jonas Vautherin (jonasvautherin@fosstodon.org)'s status on Thursday, 08-Sep-2022 21:22:35 JST Jonas Vautherin

     in reply to

     • Nitrokey

     @zack Overall I would like to think that @nitrokey is a nice initiative, but from my point of view all I see is that they start tons of projects (phone, box, keys, etc), and I'm not sure if anyone of them is finished. What I see from the blog is development issues (because it's hard, for sure).

     I wish they started with one product and finished it. #yubico seems to focus on hardware security keys, and it works, so I can trust them. I can't say that about Nitrokey, unfortunately.

     PublicLewdness repeated this.
   • Embed this notice
     Jonas Vautherin (jonasvautherin@fosstodon.org)'s status on Thursday, 08-Sep-2022 21:22:37 JST Jonas Vautherin

     in reply to

     @zack This said I have been using 2 #yubikey (5c NFC and 5C nano) everyday for more than a year (for SSH, GPG, OTP, Fido), and I love them. I had ordered one at the same time as the Nitrokey, and a second one a few months later when I was happy with the first.

   • Embed this notice
     Jonas Vautherin (jonasvautherin@fosstodon.org)'s status on Thursday, 08-Sep-2022 21:22:38 JST Jonas Vautherin

     in reply to

     • Nitrokey

     @zack I once wrote @nitrokey an email saying something like "I haven't heard from you, may I kindly ask if I still exist in your database? :-)", to which I got an answer that looked like a copy-paste from the blog.

     When I said that I had seen the blog but was worried that they may have forgotten my order, they answered something like "if you had read the previous email, you would have your answer". I read it many times, but it does not say that my order still exist.

     I consider my money lost.

   • Embed this notice
     Jonas Vautherin (jonasvautherin@fosstodon.org)'s status on Thursday, 08-Sep-2022 21:22:39 JST Jonas Vautherin

     in reply to

     @zack I pre-ordered (and paid for) a #Nitrokey more than a year ago. I have had a pretty bad experience with them: not only I never received anything, but also I don't really receive news (I have to go to their blog and hope to see news about the model I ordered, and usually news are bad: IC shortage (not their fault), or generally problems with the design (sounds like I pre-ordered a product that was far from being ready).