{"id":111,"date":"2014-04-22T10:32:30","date_gmt":"2014-04-22T08:32:30","guid":{"rendered":"https:\/\/jm.garreta.eu\/blog\/?p=111"},"modified":"2014-04-22T10:32:30","modified_gmt":"2014-04-22T08:32:30","slug":"une-authentification-supplementaire-et-materielle-avec-yubikey","status":"publish","type":"post","link":"https:\/\/jm.garreta.eu\/blog\/une-authentification-supplementaire-et-materielle-avec-yubikey\/","title":{"rendered":"Une authentification suppl\u00e9mentaire et mat\u00e9rielle avec YubiKey"},"content":{"rendered":"

En tombant sur l’article de Korben<\/a> qui pr\u00e9sente les services de Lavaboom<\/a> (qui se veut l’h\u00e9ritier de Lavabit, un service de mail s\u00e9curis\u00e9, c’est-\u00e0-dire que toutes vos donn\u00e9es sont chiffr\u00e9es sur le serveur et donc seul vous y avez acc\u00e8s avec vos moyens d’authentification), j’ai pouss\u00e9 la curiosit\u00e9 \u00e0 voir quels \u00e9taient justement les moyens d’authentification<\/a> au nombre de 3 dans la version payante.<\/p>\n

Le moyen suppl\u00e9mentaire dans la version payante (en plus de l’utilisation d’un mot de passe et d’un couple de cl\u00e9 priv\u00e9e\/publique pour la version gratuite) est l’utilisation d’une cl\u00e9 mat\u00e9rielle USB YubiKey<\/a>. Cette cl\u00e9 vous fournit un jeton OTP (one time password, mot de passe unique qui devient inutilisable apr\u00e8s son utilisation) que vous fournissez lors de l’authentification. L’id\u00e9e est plut\u00f4t sympa, pas forc\u00e9ment excessive, et n\u00e9cessite donc l’usage d’une cl\u00e9 mat\u00e9rielle pour vous authentifier, au cas o\u00f9 une personne malveillante aurait r\u00e9cup\u00e9r\u00e9 votre mot de passe et votre cl\u00e9 priv\u00e9e.<\/p>\n

Ce site<\/a> met en place un exemple d’utilisation pour se connecter \u00e0 sa machine Linux, technique que je vous invite \u00e0 aller visiter pour bien comprendre le principe et son usage.
\nOn peut d’ailleurs imaginer son utilisation en entreprise pour que les salari\u00e9s se connectent au serveur, ou au r\u00e9seau, je pense que les possibilit\u00e9s sont assez nombreuses et qu’il est possible de s’amuser avec.<\/p>\n","protected":false},"excerpt":{"rendered":"

En tombant sur l’article de Korben qui pr\u00e9sente les services de Lavaboom (qui se veut l’h\u00e9ritier de Lavabit, un service de mail s\u00e9curis\u00e9, c’est-\u00e0-dire que toutes vos donn\u00e9es sont chiffr\u00e9es sur le serveur et donc seul vous y avez acc\u00e8s avec vos moyens d’authentification), j’ai pouss\u00e9 la curiosit\u00e9 \u00e0 voir quels \u00e9taient justement les moyens … Continuer la lecture de Une authentification suppl\u00e9mentaire et mat\u00e9rielle avec YubiKey<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"blog_gen_system_prompt":"","blog_gen_user_prompt":"","blog_gen_featured_img_prompt":"","blog_gen_inline_img_prompts":"","blog_gen_model":"","blog_gen_image_model":"","blog_gen_timestamp":"","blog_gen_type_article":"","blog_gen_longueur_cible":"","footnotes":""},"categories":[3],"tags":[30,29,31],"class_list":["post-111","post","type-post","status-publish","format-standard","hentry","category-informatique","tag-lavaboom","tag-securite","tag-yubikey"],"yoast_head":"\nUne authentification suppl\u00e9mentaire et mat\u00e9rielle avec YubiKey - Le blog de Jean-Mich<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jm.garreta.eu\/blog\/une-authentification-supplementaire-et-materielle-avec-yubikey\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Une authentification suppl\u00e9mentaire et mat\u00e9rielle avec YubiKey - Le blog de Jean-Mich\" \/>\n<meta property=\"og:description\" content=\"En tombant sur l’article de Korben qui pr\u00e9sente les services de Lavaboom (qui se veut l’h\u00e9ritier de Lavabit, un service de mail s\u00e9curis\u00e9, c’est-\u00e0-dire que toutes vos donn\u00e9es sont chiffr\u00e9es sur le serveur et donc seul vous y avez acc\u00e8s avec vos moyens d’authentification), j’ai pouss\u00e9 la curiosit\u00e9 \u00e0 voir quels \u00e9taient justement les moyens … Continuer la lecture de Une authentification suppl\u00e9mentaire et mat\u00e9rielle avec YubiKey →\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jm.garreta.eu\/blog\/une-authentification-supplementaire-et-materielle-avec-yubikey\/\" \/>\n<meta property=\"og:site_name\" content=\"Le blog de Jean-Mich\" \/>\n<meta property=\"article:published_time\" content=\"2014-04-22T08:32:30+00:00\" \/>\n<meta name=\"author\" content=\"jeanmich\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"jeanmich\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/une-authentification-supplementaire-et-materielle-avec-yubikey\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/une-authentification-supplementaire-et-materielle-avec-yubikey\\\/\"},\"author\":{\"name\":\"jeanmich\",\"@id\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/#\\\/schema\\\/person\\\/5ed151f48f77a878fc9d3868c8a1ed7d\"},\"headline\":\"Une authentification suppl\u00e9mentaire et mat\u00e9rielle avec YubiKey\",\"datePublished\":\"2014-04-22T08:32:30+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/une-authentification-supplementaire-et-materielle-avec-yubikey\\\/\"},\"wordCount\":267,\"commentCount\":0,\"keywords\":[\"lavaboom\",\"s\u00e9curit\u00e9\",\"yubikey\"],\"articleSection\":[\"Informatique\"],\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/une-authentification-supplementaire-et-materielle-avec-yubikey\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/une-authentification-supplementaire-et-materielle-avec-yubikey\\\/\",\"url\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/une-authentification-supplementaire-et-materielle-avec-yubikey\\\/\",\"name\":\"Une authentification suppl\u00e9mentaire et mat\u00e9rielle avec YubiKey - Le blog de Jean-Mich\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/#website\"},\"datePublished\":\"2014-04-22T08:32:30+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/#\\\/schema\\\/person\\\/5ed151f48f77a878fc9d3868c8a1ed7d\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/une-authentification-supplementaire-et-materielle-avec-yubikey\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/une-authentification-supplementaire-et-materielle-avec-yubikey\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/une-authentification-supplementaire-et-materielle-avec-yubikey\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Une authentification suppl\u00e9mentaire et mat\u00e9rielle avec YubiKey\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/\",\"name\":\"Le blog de Jean-Mich\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/#\\\/schema\\\/person\\\/5ed151f48f77a878fc9d3868c8a1ed7d\",\"name\":\"jeanmich\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/816266d852c4595a2bfa578a991fa68bb8ed5e0217f3565158ca20c139873bda?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/816266d852c4595a2bfa578a991fa68bb8ed5e0217f3565158ca20c139873bda?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/816266d852c4595a2bfa578a991fa68bb8ed5e0217f3565158ca20c139873bda?s=96&d=mm&r=g\",\"caption\":\"jeanmich\"},\"url\":\"https:\\\/\\\/jm.garreta.eu\\\/blog\\\/author\\\/jeanmich\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Une authentification suppl\u00e9mentaire et mat\u00e9rielle avec YubiKey - Le blog de Jean-Mich","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jm.garreta.eu\/blog\/une-authentification-supplementaire-et-materielle-avec-yubikey\/","og_locale":"fr_FR","og_type":"article","og_title":"Une authentification suppl\u00e9mentaire et mat\u00e9rielle avec YubiKey - Le blog de Jean-Mich","og_description":"En tombant sur l’article de Korben qui pr\u00e9sente les services de Lavaboom (qui se veut l’h\u00e9ritier de Lavabit, un service de mail s\u00e9curis\u00e9, c’est-\u00e0-dire que toutes vos donn\u00e9es sont chiffr\u00e9es sur le serveur et donc seul vous y avez acc\u00e8s avec vos moyens d’authentification), j’ai pouss\u00e9 la curiosit\u00e9 \u00e0 voir quels \u00e9taient justement les moyens … Continuer la lecture de Une authentification suppl\u00e9mentaire et mat\u00e9rielle avec YubiKey →","og_url":"https:\/\/jm.garreta.eu\/blog\/une-authentification-supplementaire-et-materielle-avec-yubikey\/","og_site_name":"Le blog de Jean-Mich","article_published_time":"2014-04-22T08:32:30+00:00","author":"jeanmich","twitter_misc":{"\u00c9crit par":"jeanmich","Dur\u00e9e de lecture estim\u00e9e":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/jm.garreta.eu\/blog\/une-authentification-supplementaire-et-materielle-avec-yubikey\/#article","isPartOf":{"@id":"https:\/\/jm.garreta.eu\/blog\/une-authentification-supplementaire-et-materielle-avec-yubikey\/"},"author":{"name":"jeanmich","@id":"https:\/\/jm.garreta.eu\/blog\/#\/schema\/person\/5ed151f48f77a878fc9d3868c8a1ed7d"},"headline":"Une authentification suppl\u00e9mentaire et mat\u00e9rielle avec YubiKey","datePublished":"2014-04-22T08:32:30+00:00","mainEntityOfPage":{"@id":"https:\/\/jm.garreta.eu\/blog\/une-authentification-supplementaire-et-materielle-avec-yubikey\/"},"wordCount":267,"commentCount":0,"keywords":["lavaboom","s\u00e9curit\u00e9","yubikey"],"articleSection":["Informatique"],"inLanguage":"fr-FR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/jm.garreta.eu\/blog\/une-authentification-supplementaire-et-materielle-avec-yubikey\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/jm.garreta.eu\/blog\/une-authentification-supplementaire-et-materielle-avec-yubikey\/","url":"https:\/\/jm.garreta.eu\/blog\/une-authentification-supplementaire-et-materielle-avec-yubikey\/","name":"Une authentification suppl\u00e9mentaire et mat\u00e9rielle avec YubiKey - Le blog de Jean-Mich","isPartOf":{"@id":"https:\/\/jm.garreta.eu\/blog\/#website"},"datePublished":"2014-04-22T08:32:30+00:00","author":{"@id":"https:\/\/jm.garreta.eu\/blog\/#\/schema\/person\/5ed151f48f77a878fc9d3868c8a1ed7d"},"breadcrumb":{"@id":"https:\/\/jm.garreta.eu\/blog\/une-authentification-supplementaire-et-materielle-avec-yubikey\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jm.garreta.eu\/blog\/une-authentification-supplementaire-et-materielle-avec-yubikey\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jm.garreta.eu\/blog\/une-authentification-supplementaire-et-materielle-avec-yubikey\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/jm.garreta.eu\/blog\/"},{"@type":"ListItem","position":2,"name":"Une authentification suppl\u00e9mentaire et mat\u00e9rielle avec YubiKey"}]},{"@type":"WebSite","@id":"https:\/\/jm.garreta.eu\/blog\/#website","url":"https:\/\/jm.garreta.eu\/blog\/","name":"Le blog de Jean-Mich","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jm.garreta.eu\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Person","@id":"https:\/\/jm.garreta.eu\/blog\/#\/schema\/person\/5ed151f48f77a878fc9d3868c8a1ed7d","name":"jeanmich","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/secure.gravatar.com\/avatar\/816266d852c4595a2bfa578a991fa68bb8ed5e0217f3565158ca20c139873bda?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/816266d852c4595a2bfa578a991fa68bb8ed5e0217f3565158ca20c139873bda?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/816266d852c4595a2bfa578a991fa68bb8ed5e0217f3565158ca20c139873bda?s=96&d=mm&r=g","caption":"jeanmich"},"url":"https:\/\/jm.garreta.eu\/blog\/author\/jeanmich\/"}]}},"_links":{"self":[{"href":"https:\/\/jm.garreta.eu\/blog\/wp-json\/wp\/v2\/posts\/111","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jm.garreta.eu\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jm.garreta.eu\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jm.garreta.eu\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jm.garreta.eu\/blog\/wp-json\/wp\/v2\/comments?post=111"}],"version-history":[{"count":4,"href":"https:\/\/jm.garreta.eu\/blog\/wp-json\/wp\/v2\/posts\/111\/revisions"}],"predecessor-version":[{"id":115,"href":"https:\/\/jm.garreta.eu\/blog\/wp-json\/wp\/v2\/posts\/111\/revisions\/115"}],"wp:attachment":[{"href":"https:\/\/jm.garreta.eu\/blog\/wp-json\/wp\/v2\/media?parent=111"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jm.garreta.eu\/blog\/wp-json\/wp\/v2\/categories?post=111"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jm.garreta.eu\/blog\/wp-json\/wp\/v2\/tags?post=111"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}