This article is within the scope of WikiProject Computer Security, a collaborative effort to improve the coverage of
computer security on Wikipedia. If you would like to participate, please visit the project page, where you can join
the discussion and see a list of open tasks.Computer SecurityWikipedia:WikiProject Computer SecurityTemplate:WikiProject Computer SecurityComputer Security articles
It'd be nice to see a table of products (e.g. YubiHSM2, Security Key NFC, YubiKey 5 NFC) with exactly what tasks each can do (serve as a private CA, serve as the repo for OpenSSH keys, securely hold OpenSSH keys to allow one time connections from an untrusted computer, PGP signing / decrypt / keygen, x.509 same etc) — Preceding
unsigned comment added by
63.77.19.196 (
talk)
16:12, 1 February 2019 (UTC)reply
Unfortunately, there's not a clear comparison page on Yubico's site (and no info on older products). It looks like the various Yubikey 5 versions have identical crypto hardware, just different form factors and IO (
[1]). The only product Yubico offers right now that doesn't have the same feature set as the Yubikey 5 is the "Security Key Series", which only does FIDO2 and U2F.
AManNamedEdwan (
talk)
09:28, 10 October 2020 (UTC)reply
Some proposed changes
This
edit request by an editor with a
conflict of interest was declined. Some or all of the changes weren't supported by neutral, independent, reliable sources. Consider re-submitting with content based on media, books and scholarly works.
Information to be added or removed: Replace social activism section with "Since 2014, Yubico has donated thousands of YubiKeys every year to non-profit organizations supporting free speech and a free open internet, including Freedom of The Press and Electronic Frontier Foundation. The company says the decision is based on their mission to make the internet safer for all – without free speech there is no security."
Explanation of issue: Yubico is committed to working with people at risk around the world, regardless of political affiliation. Additionally, Yubico does not disclose information surrounding donations to at-risk groups to help preserve user privacy.
Your suggested changes are about possible improvements to the article, so lets discuss them.
It appears that you wish to have the current information at
YubiKey#Social activism concerning the Hong Kong protests removed, giving as a reason "Yubico does not disclose information surrounding donations to at-risk groups to help preserve user privacy." The problem is that the information was published in the South China Morning Post and in 立場新聞 Stand News, which Yubico has no control over. Wikipedia just reports what the sources say. You would have to contact those two publications and have them retract their claims for us to remove them from the article.
You also want us to add the claim "Yubico has donated thousands of YubiKeys every year to non-profit organizations supporting free speech and a free open internet, including Freedom of The Press and Electronic Frontier Foundation."
I think adding info about
Freedom of the Press Foundation using Yubikeys would be a great addition to the article, but per
WP:V and
WP:RS we need a source other than Yubico to back up the claim. Something on the Freedom of the Press Foundation site would be good, but something from a reliable third party source would be even better. Are there any sources for the claim? The claim about Google at
[2] is also promising if we can find a reliable third party source for the claim.
In addition, the source you yourself provided from the Yubico website says nothing about the EFF, and nothing about donating anything to anyone. Instead it contains a 50% discount offer on up to ten devices for qualifying organizations.
Which claim about Google in that article is in need of a third party source? The Advanced Protection Program is obviously a Real Thing, and the main page already has a (apparently) good source for Yubico's work on U2F.
AManNamedEdwan (
talk)
09:39, 10 October 2020 (UTC)reply
It it's "obviously a Real Thing", then you should be able to find reliable second-party sources for it, rather than relying on the Yubico web page. Also, establishing that Google's Advanced Protection Program exists does not establish the "Yubico has partnered with Google on this initiative" claim. --
Guy Macon (
talk)
15:36, 10 October 2020 (UTC)reply
Ah, yeah, I have no idea if they partnered to create the Protection Program or if that Yubico page is just spinning on "we worked together on U2F, so this is technically a collaboration."
AManNamedEdwan (
talk)
20:02, 10 October 2020 (UTC)reply