From 13c8fcf6473c18c7dec5cce65b251a78f4baa43e Mon Sep 17 00:00:00 2001 From: Philipp Eckel Date: Tue, 19 Mar 2019 00:30:03 +0100 Subject: [PATCH] no need to support the monopoly --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 86342f9..7516b49 100644 --- a/README.md +++ b/README.md @@ -70,7 +70,7 @@ Consider purchasing a pair of YubiKeys, programming both, and storing one in a s # Verify YubiKey -To confirm your YubiKey is genuine open Chrome and go to [https://www.yubico.com/genuine/](https://www.yubico.com/genuine/). Insert your Yubico device, and click Verify Device to begin the process. Touch the YubiKey when prompted, and if asked, allow it to see the make and model of the device. If you see "Verification complete", your device is authentic. +To confirm your YubiKey is genuine open a [browser with U2F support](https://support.yubico.com/support/solutions/articles/15000009591-how-to-confirm-your-yubico-device-is-genuine-with-u2f) and go to [https://www.yubico.com/genuine/](https://www.yubico.com/genuine/). Insert your Yubico device, and click `Verify Device` to begin the process. Touch the YubiKey when prompted, and if asked, allow it to see the make and model of the device. If you see `Verification complete`, your device is authentic. This website verifies the YubiKey's device attestation certificates signed by a set of Yubico CAs, and helps mitigate [supply chain attacks](https://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/DEFCON-25-r00killah-and-securelyfitz-Secure-Tokin-and-Doobiekeys.pdf).