I was in contact with a Sr. Customer Support Specialist from Yubico and I was not impressed by their denial of a problem.
The reason to get such a Hardware Token is, that the private key cannot be extracted, even if the users lose it.
They have plausible deniability for fraud with the broken devices.
Claiming that this would not be a problem and trying to explain why it is not a problem without considering their client could be right, is pure arrogance.
Only a complete exchange of the whole management of yubico could save them, when they want to be taken seriously ever again.
And of course the new management should immediately offer a cost free exchange program.
The reason to get such a Hardware Token is, that the private key cannot be extracted, even if the users lose it.
They have plausible deniability for fraud with the broken devices.
Claiming that this would not be a problem and trying to explain why it is not a problem without considering their client could be right, is pure arrogance.
Only a complete exchange of the whole management of yubico could save them, when they want to be taken seriously ever again.
And of course the new management should immediately offer a cost free exchange program.
D'oh.