search

Nitrokey / trussed-secrets-app

Secrets App: OTP and PWS application for the Nitrokey 3
Apache License 2.0
7 stars 4 forks source link

[draft] Improve UX - decrease the touch button press count #112

Open szszszsz opened 1 month ago

szszszsz commented 1 month ago

As a user I would like to have it less troublesome to edit and create secret credentials in Nitrokey 3 using Nitrokey App 2.

  1. Creating secret credential
  2. Modifying ----
  3. That's all with Nitrokey App 2.

Proposed solutions:

  1. FIDO2-like session token, based on PIN and the touch state
  2. Touch button "latching" (keep it 5 seconds pressed without active user press)
  3. Anything else?

Check threat analysis for the design, and original intent of the touch confirmation.

Contact with Janos regarding Nitrokey App2 for the implementation ideas.

szszszsz commented 1 month ago

User comment from the "Nitrokey" main channel:

I don't really understand when the NK-App2 asks for a touch. I haven't set "Require Touch" on any password. but it asks everytime I want to do something for a touch. Saving changes to a password required three times touch?! Is this an issue? It's a bit annoying.

daringer commented 1 month ago

please also include this one into the scope of the upcoming PR: https://github.com/Nitrokey/trussed-secrets-app/issues/108