Talk:YubiKey

What products support what features?
It'd be nice to see a table of products (e.g. YubiHSM2, Security Key NFC, YubiKey 5 NFC) with exactly what tasks each can do (serve as a private CA, serve as the repo for OpenSSH keys, securely hold OpenSSH keys to allow one time connections from an untrusted computer, PGP signing / decrypt / keygen, x.509 same etc) — Preceding unsigned comment added by 63.77.19.196 (talk) 16:12, 1 February 2019 (UTC)
 * Unfortunately, there's not a clear comparison page on Yubico's site (and no info on older products). It looks like the various Yubikey 5 versions have identical crypto hardware, just different form factors and IO . The only product Yubico offers right now that doesn't have the same feature set as the Yubikey 5 is the "Security Key Series", which only does FIDO2 and U2F. AManNamedEdwan (talk) 09:28, 10 October 2020 (UTC)

Some proposed changes
Information to be added or removed: Replace social activism section with "Since 2014, Yubico has donated thousands of YubiKeys every year to non-profit organizations supporting free speech and a free open internet, including Freedom of The Press and Electronic Frontier Foundation. The company says the decision is based on their mission to make the internet safer for all – without free speech there is no security."

Explanation of issue: Yubico is committed to working with people at risk around the world, regardless of political affiliation. Additionally, Yubico does not disclose information surrounding donations to at-risk groups to help preserve user privacy.

References supporting change: https://www.yubico.com/solutions/advanced-protection-program/

DFee421 (talk) 23:10, 3 April 2020 (UTC)


 * Hi! Thanks for following at least some of the advice at Best practices for editors with close associations. As I explained to you at User talk:DFee421, you are required by the Wikimedia Foundation's terms of use to disclose your employer, client, and affiliation with respect to any contribution which forms all or part of work for which you receive, or expect to receive, compensation. See Paid-contribution disclosure. Please respond with an indication that you will do this at at User talk:DFee421, not here. Talk:YubiKey is for discussing possible improvements to the Wikipedia YubiKey article.


 * Your suggested changes are about possible improvements to the article, so lets discuss them.


 * It appears that you wish to have the current information at YubiKey concerning the Hong Kong protests removed, giving as a reason "Yubico does not disclose information surrounding donations to at-risk groups to help preserve user privacy." The problem is that the information was published in the South China Morning Post and in 立場新聞 Stand News, which Yubico has no control over. Wikipedia just reports what the sources say. You would have to contact those two publications and have them retract their claims for us to remove them from the article.


 * You also want us to add the claim ''"Yubico has donated thousands of YubiKeys every year to non-profit organizations supporting free speech and a free open internet, including Freedom of The Press and Electronic Frontier Foundation."


 * I think adding info about Freedom of the Press Foundation using Yubikeys would be a great addition to the article, but per WP:V and WP:RS we need a source other than Yubico to back up the claim. Something on the Freedom of the Press Foundation site would be good, but something from a reliable third party source would be even better. Are there any sources for the claim? The claim about Google at is also promising if we can find a reliable third party source for the claim.


 * In addition, the source you yourself provided from the Yubico website says nothing about the EFF, and nothing about donating anything to anyone. Instead it contains a 50% discount offer on up to ten devices for qualifying organizations.


 * --Guy Macon (talk) 00:08, 4 April 2020 (UTC)


 * Which claim about Google in that article is in need of a third party source? The Advanced Protection Program is obviously a Real Thing, and the main page already has a (apparently) good source for Yubico's work on U2F. AManNamedEdwan (talk) 09:39, 10 October 2020 (UTC)


 * It it's "obviously a Real Thing", then you should be able to find reliable second-party sources for it, rather than relying on the Yubico web page. Also, establishing that Google's Advanced Protection Program exists does not establish the "Yubico has partnered with Google on this initiative" claim. --Guy Macon (talk) 15:36, 10 October 2020 (UTC)


 * Ah, yeah, I have no idea if they partnered to create the Protection Program or if that Yubico page is just spinning on "we worked together on U2F, so this is technically a collaboration." AManNamedEdwan (talk) 20:02, 10 October 2020 (UTC)