Shulou(Shulou.com)06/03 Report--

Whether GitHub supports FIDO2 security keys, many novices are not very clear about this. In order to help you solve this problem, the following editor will explain it in detail. People with this need can come and learn. I hope you can get something.

GitHub provides new support for the use of FIDO2 security keys when performing SSH Git operations to increase account protection.

Two years ago, researchers at North Carolina State University (NCSU) found that after scanning about 13% of GitHub public repositories in the past six months, more than 100000 GitHub repositories leaked API tokens and encryption (SSH and TLS) keys. To make matters worse, they also found that thousands of new repositories are also leaking security privacy every day.

In order to further improve the anti-theft capability of GitHub accounts, GitHub now supports FIDO2 security keys, and users can use portable FIDO2 devices for SSH authentication to ensure the security of Git operations and prevent accidental exposure of private keys and unauthorized requests from malicious software.

Furthermore, GitHub recommends that users replace all previously registered SSH keys with SSH keys supported by security keys, which ensures that the user is the only one who can manage the project's Git data through SSH. In addition, GitHub automatically removes inactive SSH keys from the user's account (not used for more than a year).

In December, GitHub announced that it would switch to token-based authentication from August 2021, when account passwords would no longer be accepted to authenticate Git operations. At the same time, GitHub is also one of the first companies to switch to network authentication (WebAuthn) for two-factor authentication, and is an early adopter of the FIDO Universal second Factor (U2F) open authentication standard.

Is it helpful for you to read the above content? If you want to know more about the relevant knowledge or read more related articles, please follow the industry information channel, thank you for your support.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.