Adam Williamson wrote:
However, it supports Google Authenticator-style OTPs. Folks
with infra privileges on their accounts (like me) are already required
to use these. It works fine. I preferred being able to use a yubikey so
I don't always have to open an app on my phone and retype a six digit
code when I need to log in to something, but that's just a minor
annoyance.
You can produce compatible OTPs with a yubikey if you want. Install
yubioath-desktop. You open an app on your workstation/laptop instead of
on the phone, and paste from the clipboard instead of retyping. (Still
not as good as U2F of course.)
Björn Persson