OATH Tokens

[Ian Batten]

On 12 Oct 2010, at 14:47, Tom Yates wrote:

> On Mon, 11 Oct 2010, Ian Batten wrote:
> 
>> Does anyone know of a route by which I could buy half a dozen OATH-compliant tokens for a OTP experiment?
> 
> according http://www.yubico.com/products/yubikey/, the yubikey is OATH-compliant, and you can certainly buy those singly or in multiples from their site.

Thanks to the people who suggested this.  I now have two programmed up to run in OATH mode.  I'd already written the code to handle softtokens on my iPhone, and the Yubicos dropped straight in and worked first time.   Reassuringly, you provide your own key material, rather than as with other products messing about making sure you have the right physical token configured with the right pre-programmed key.

They also have two profiles, so you can configure them for two purposes.

My kids will try them at school tomorrow.

ian