developers.yubico.com
developers.yubico.com copied to clipboard
Yubico
Source code for generating our website
You could mention that using the key stored on the Yubikey as the signing authority is a valid alternative.
Similar to the work done for PIV, and should be done after #58, as most of the important bits will fall under that category (setting PINs etc).
This category should have a common section, and then a device specific sections. What these should do is provide step by step guides as to what (and how) to do...
it seems there are only 16 sessions for user to attempt the password, and after that, the attacker need to wait for 30s ,is that right?
