feature request: android wear support...

[Mathias Homann]

Hi guys,

It would be nice to be able getting one time pins directly off the
display of my smartwatch, instead of having to pull out my phone...

Cheers
Mathias

[Nathaniel McCallum]

On Tue, 2015-10-13 at 12:25 +0200, Mathias Homann wrote:
>  Hi guys,
>  
>  It would be nice to be able getting one time pins directly off the
>  display of my smartwatch, instead of having to pull out my phone... 
Sounds like a great idea! Are you volunteering to work on it? :)

[Ayal.Org]

Or maybe donate hardware to someone willing to work on it :)

Anyway, what would the interface be like? How would you request a new PIN?

On Tue, Oct 13, 2015 at 3:30 PM Nathaniel McCallum <npmccallum(a)redhat.com&gt;
wrote:

>  On Tue, 2015-10-13 at 12:25 +0200, Mathias Homann wrote:
>  > Hi guys,
>  >
>  > It would be nice to be able getting one time pins directly off the
>  > display of my smartwatch, instead of having to pull out my phone...
>
>  Sounds like a great idea! Are you volunteering to work on it? :)
>  _______________________________________________
>  freeotp-devel mailing list
>  freeotp-devel(a)lists.fedorahosted.org
>  https://lists.fedorahosted.org/mailman/listinfo/freeotp-devel
>

[Nathaniel McCallum]

On Tue, 2015-10-13 at 12:32 +0000, Ayal.Org wrote:
>  Or maybe donate hardware to someone willing to work on it :) 
I am willing to receive such hardware. :)

>  Anyway, what would the interface be like? How would you request a
> new
>  PIN? 
Big changes are coming for Android (akin to what is in iOS master).
This includes both bluetooth and fingerprint scanner support.

The smartwatch UI I envision is a list of all tokens not protected by
the fingerprint scanner. If the phone has a bluetooth connection to the
computer available, the watch can send the code directly to the
computer. Otherwise, it would display the code on the screen.

>  On Tue, Oct 13, 2015 at 3:30 PM Nathaniel McCallum
>  <npmccallum(a)redhat.com&gt; wrote:
>  > On Tue, 2015-10-13 at 12:25 +0200, Mathias Homann wrote:
>  > > Hi guys,
>  > >
>  > > It would be nice to be able getting one time pins directly off
>  > the
>  > > display of my smartwatch, instead of having to pull out my
>  > phone...
>  > 
>  > Sounds like a great idea! Are you volunteering to work on it? :)
>  > _______________________________________________
>  > freeotp-devel mailing list
>  > freeotp-devel(a)lists.fedorahosted.org
>  > https://lists.fedorahosted.org/mailman/listinfo/freeotp-devel
>  > 
>  _______________________________________________
>  freeotp-devel mailing list
>  freeotp-devel(a)lists.fedorahosted.org
>  https://lists.fedorahosted.org/mailman/listinfo/freeotp-devel

[Mathias Homann]

I'd be willing to put all my android software development knowledge into
it... if I had any.

I'd be quite willing to test the app.

Am 13.10.2015 um 14:30 schrieb Nathaniel McCallum:
>  On Tue, 2015-10-13 at 12:25 +0200, Mathias Homann wrote:
> > Hi guys,
> >
> > It would be nice to be able getting one time pins directly off the
> > display of my smartwatch, instead of having to pull out my phone...
>  Sounds like a great idea! Are you volunteering to work on it? :)
>  _______________________________________________
>  freeotp-devel mailing list
>  freeotp-devel(a)lists.fedorahosted.org
>  https://lists.fedorahosted.org/mailman/listinfo/freeotp-devel

[Mathias Homann]

How about this for the interface:

- configuration and setup of keys still happens exclusively on the phone
or tablet
- on the wearable the user can scroll through a list of all configured
keys, and tap one to receive a pin.

Yes I am aware that the watch being stolen would compromise security of
the one time pins. So does having your RSA token stolen. The watch is at
least strapped to your wrist.

cheers
Mathias


Am 13.10.2015 um 14:32 schrieb Ayal.Org:
>  Or maybe donate hardware to someone willing to work on it :)
>
>  Anyway, what would the interface be like? How would you request a new PIN?
>
>  On Tue, Oct 13, 2015 at 3:30 PM Nathaniel McCallum
>  <npmccallum(a)redhat.com <mailto:[e-mail]>> wrote:
>
>      On Tue, 2015-10-13 at 12:25 +0200, Mathias Homann wrote:
>      > Hi guys,
>      >
>      > It would be nice to be able getting one time pins directly off the
>      > display of my smartwatch, instead of having to pull out my phone...
>
>      Sounds like a great idea! Are you volunteering to work on it? :)
>      _______________________________________________
>      freeotp-devel mailing list
>      freeotp-devel(a)lists.fedorahosted.org
>      <mailto:[e-mail]>
>      https://lists.fedorahosted.org/mailman/listinfo/freeotp-devel
>
>
>
>  _______________________________________________
>  freeotp-devel mailing list
>  freeotp-devel(a)lists.fedorahosted.org
>  https://lists.fedorahosted.org/mailman/listinfo/freeotp-devel

[Mathias Homann]

Am 14.10.2015 um 12:08 schrieb Mathias Homann:
>  Yes I am aware that the watch being stolen would compromise security
> of
>  the one time pins. So does having your RSA token stolen. The watch is at
>  least strapped to your wrist.
>  
In actual fact, the watch being stolen would not even be that much of a
security hole, since the watch would just be an external display for the
app on the phone, the actual generation of pins would happen on the phone.


Cheers
Mathias