yubikey
yubikey copied to clipboard
Add posibility HTTPS without apikey signature
Add the possibility to send otp code without apikey, behind only HTTPS protocol.
Just curious, if this removes the API key how does the service verify who is making the request?
In this link https://developers.yubico.com/yubikey-val/Getting_Started_Writing_Clients.html, say that if you are using https, its not necessary to verify the request only if you want. I supposed, because you send a request with ssl and response is secure too.
Sorry for my english.
On 18/03/16 11:50, Chris Cornutt wrote:
Just curious, if this removes the API key how does the service verify who is making the request?
— You are receiving this because you authored the thread. Reply to this email directly or view it on GitHub https://github.com/enygma/yubikey/pull/20#issuecomment-198303332
I think, I've already made all the changes you asked.