Quote from: Inaba on April 03, 2012, 02:33:37 PM

Yubikey and Google Auth, while accomplishing the same thing, are different and not mutually exclusive in the sense that each has their advantages.

First and foremost, one could argue Yubikey is a bit more secure than Google Auth. (But for practical purposes, it's largely irrelevant). Additionally, Google Auth is not supported on all devices. Yubikey, also, is not supported on all devices (namely, those devices without a USB port). Yubikey is more convenient in terms of entering your OTP, less convenient since you have to carry something around in addition to your phone (for Google Auth).

I would vote to add the ability to use one or the other, not just Google Auth. I use Yubikey in several places and Google Auth in other places, depending on the situation and I find them both useful in their own ways, while neither of them are perfect, sadly. Now... Google Auth would be awesome if paired with NFC and the computers I use had NFC readers.

Thanks for point out GoogleAuth to me, it was exactly what I was looking for.

Don't care too much for Yubikey on three grounds.

1) I would have to buy one to get started integrating it into GLBSE, just the pain of having to wait and the price

2)My users would have to buy one, some would already have them, most would not.

3)GoogleAuth is just about good enough and took me a little over 1/2 a day from first hearing about it to rolling it out. The Yubikey wouldn't even have arrived by then.