Yubico announces the first Lightning security key for iPhones

[InfoSec News <alerts () infosecnews org>]

https://www.theverge.com/2019/1/8/18172193/yubico-security-key-lightning-connection-iphone-2fa-ces-2019

By Russell Brandom
The Verge
Jan 8, 2019

Yubico has announced a new version of its popular Security Key for use in 
Lightning ports, the first such device to enable physical token authentication 
for iPhones. The device also supports a USB-C connection.

Previously, the only way to connect a security key to an iPhone was over 
Bluetooth, which suffered Bluetooth's normal usability issues as well as 
potential security concerns around mistaken pairings. Android devices can also 
pair over NFC, but that functionality is impossible under iOS's current NFC 
restrictions.

"The industry has ended up with Bluetooth as the best way to connect with 
iPhones," said Yubico SVP of product Jerrod Chong. "We felt that wasn't good 
enough. If you want users to get over the hurdle of using a security device, 
you have to solve that usability problem."

Security keys are physical devices used to log in to services, either as a 
password replacement or a second factor. Because of the protocol used, it's far 
more difficult to intercept codes in transit, making it significantly more 
secure than a password or even a one-time code. Yubico already offers security 
keys that connect over USB and NFC. As part of today’s announcement, Yubico is 
also releasing an NFC-enabled version of its conventional USB Key.

[...]

--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
https://twitter.com/infosecnews_