[afniljl]

Does feel like Google putting their brand (and support) behind u2f keys will improve public perception of it. Though understand the concern about it being China made.

Hope this means other bigco will come out and improve manufacturing options, distribution options, bring the consumer cost down etc?

Qn of why are so few companies selling security keys if it's so important? Is Yubikey the ONLY safe option?

agree that cost is still prohibitive for small companies, home consumers, those in countries with weaker forex etc. Security should be able to cost less in order to be more widespread. Current it's like a first world luxury for those who can afford it, to be walled off into a harder-to-attack group like how mac users used to be more secure because there so few of them they were not worth general hacking.

Am glad to see Google strongly, actively, loudly pushing anti phishing security forward to all consumers through all their channels, which all other companies can do much more of. Eg if Apple sold a $100 u2f key through all their retail stores etc.

[sbr464]

I had a similar question recently about https/ssl certs being so important and why most major ssl vendor ecommerce sites are so seedy/early 2000s design patterns.