mimming

I made the switch to a cellular tablet (9.7" iPad Pro) a couple years ago and it's been great.

It reduces the urge to whip out my mobile device at every moment of mild boredom, and collaborative apps like ported board games shine.

The one downside is that I look pretty silly when taking photos.

Generally yes, but the admin has the power to either enforce it (for some or all users) or disable it domain wide.

If you were to create a new GSuite domain today, it'd be allowed for all users.

Yes google does.

The spec strongly encourages providers to allow multiple keys, and allow you to nickname them.

As far as I know everyone allows as many keys as you like except Vanguard and Amazon AWS (which both also only accept Yubico keys)

You use a less convenient backup authentication.

The specifics depend on the use case, but even if you fall back to something less secure like an email and TOTP, you still come out ahead overall because most authentications are done by U2F.

Aw, that's a bummer. First Vanguard and now AWS support only Yubikey brand U2F devices. I wonder why that's happening?

Hopefully this practice remains limited. I really don't want haul a bag of different security keys around with me to access all of my services.

They mention Yubikey a lot by name in the post. Has anyone tried a U2F device from a different manufacturer?

It’s not as big of a deal as you might expect because:

- The spec requires providers to allow independent addition / removal of multiple keys per account, so it’s easy to manage backup U2F keys.

- Providers can use any backup authentication method they want. This includes SMS codes, TOTP / HOTP apps, email resets, or maybe VCing in to tech support.

And even if the backup method is less awesome (e.g. sms codes) it still reduces your risk because because you use it less often.

[edit for formatting]

The protocol specifics 3 transport options with this in mind: usb, nfc, and Bluetooth.

As others mention, nfc works great for android. Bluetooth is your only option for iOS, and it’s clunky because you have to deal with pairing.

The teacher you're thinking of from last year is me :)

Thanks a lot for the great classroom product, and your support. It made my work a lot easier.