Royal Apps

Hello there :)

Would it be possible to have support for a hardware YubiKey keys in the Royal TSX WebKit plugin?

I meant the support of the hardware security keys, for FIDO2, U2F Support

Any news about this?

Hi there, 

Add me to those who would love to see Yubikey support, especially FIDO/U2F in webkit browser and for RDP sessions, and the Yubikey smartcard key for ssh. 

For things that do require TOTP, I wonder if there's an sdk or a way to use the Yubikey Authenticator as a source for auto logon TOTP credentials?  

Let me add this as a rationale: for certain logins, we want a 2nd auth factor that is actually a "hard" uncopyable token. If the first factor's secret (the password) and the TOTP secret are both saved in the same place (i.e. Royal Apps or password manager, etc), then I'll argue that it's not really 2FA.  If there's no token (based on a non-replayable HMAC signing of a challenge inside the Yubikey after a physical touch, for example), there's no 2nd factor and no access - that's the goal.  Someone could steal the Yubikey but they cannot steal the secret that is inside it.

I would argue that TOTP secret in the same password manager sure is convenient, but perhaps it's not much more secure than one factor...

Could Yubikey and general smartcard support perhaps be implemented with this distinction in mind?  Depend on the Yubikey's ability to prove that the auth secret is present but without putting it at risk.

Rob