I'm about to buy a new #YubiKey (or maybe even two), and I'm a bit undecided between two models, the 5C (picture 1) and the 5C NFC (picture 2).
Who of you has either of these models, or even both, and can say something about the build quality?
I already own a 5 NFC (picture 3), i.e. with a USB A connector. This thing is rock solid. It's been on my keychain for years and would probably survive another 5 to 10, but picture 4 from a review with "one year on the keyring" made me pause.
@scy I own a 5c and several 5c nfc ones. I love the larger nfc one, the small, tiny 5c is annoying in handling. regardings stability no issues at all on any of my yubikeys (i did own also the really old ones that I had on my keyring for ages).
@fkr Huh! There seems to be not a single image or video online that shows this, and I also couldn't find it in the official docs anywhere either. Thanks for the picture!
@rami Yep, "phone" is basically the reason why I'm looking into the USB C variants, because I'm not sure how trustworthy (e.g. eavesdropping-resistant) the NFC communication is.
@scy Given that (a) WebAuthn is asymmetric cryptography and (b) the NFC stops working when I place the Yubikey half a centimeter away from the phone, I'm not tooo worried about people given how large the antennas would probably need to have in my vicinity. But sure, USB just does not have that problem.
@rami I think I might be following @jiska for too long to really have any kind of trust in wireless technology left. But also I couldn't find any detailed tech specs on how it works.
My specific use case would be OpenPGP and TOTP, and while it wouldn't be the end of the world if the YubiKey replied with a cleartext TOTP code, it woldn't be exactly great either.
Same goes for OpenPGP, although I have to admit that I don't even know what's exchanged over NFC there. Just a session key?
@scy@jiska Fair enough :) No idea on how TOTP over NFC works there. For PGP, I'm pretty sure the actual PGP key never leaves the yubikey, but I assume the symmetric encryption key of the specific message you are trying to decrypt is transmitted. So yeah, sure, depending on the risk profile that might be bad.
@scy I have both the 5 NFC (~4 years) and the 5C NFC (~1.5 years) on my keyring with me everyday and never had any problems whatsoever regarding functionality. They look a bit used of course, but apart from that they are still great. I initially expected the C Port to be a bit flimsy, but it is built rock solid, just like the 5 NFC.
@dahie Both the ones I'm asking about have USB C. Do you have the small one ("5C", picture 1, without NFC) or the big one ("5C NFC", picture 2, with NFC)? Where/how do you carry it?
@scy i own a Yubikey NFC, a Mini, a 5 NFC and the new small ohne with USB-C (can't remember the name). The big ones live on my keychain and I can testify their sturdiness.
@alarmschaben So, you have neither the 5C in the first picture nor the 5C NFC in the second picture on your keychain, right? The ones I was asking about?
Add comment