Add option to set touch policy to "cache" #55
Conversation
|
My 2 cents. I'd expose all 3 values for pin policy if an option is added. |
|
I was trying to avoid exposing the no-touch option for security reasons before I read through your other PR and saw that use-case. I'll update this to add the three touch policy options |
|
It is possible to set the touch policy after initial setup? |
No.
https://support.yubico.com/support/solutions/articles/15000014219-yubikey-5-series-technical-manual |
|
Hey, is there any reason why this is not merged? I'm looking into the topic atm, and thisis the only blocker for my usecase (don't wanna touch all the time when using polysh to connect to to 100 machines). |
|
Yep, waiting on this as well |
|
As an addition to this, might be useful to have a notification on each successful ssh authentication, as you don't have the "forced awareness" of it as tapping the button would provide |
|
Flagging some related issues and PRs:
With more flexible touch policy support, you can support lower-security cases with no-touch support, and high-security cases with always touch. |
|
Thank you for the PR. I don't want to add options to |
This adds an optional setup flag that allows the touch policy to be set.
to "cache for 15 seconds" instead of "always".I've tried to add this feature in the least obtrusive way possible, but the command line is getting a little complex for the plain oldflagpackage. Would there be any interest in using a CLI library inyubikey-agent?Closes: #52