1) is it possible to drop PIN Requirement for HMAC or make it optional or whatever
2) could we add a way to insert the pin for the 2 hmac commands.
because for me they just die with "PIN required" which obviously sux.
as they obviously can be (and are) used for things where the response actually us used for something like crypto it might be an interesting Idea to use different secrets for acting with and without pin. that way if one wants pin it cannot just be skipped. and as these things may run local you might not want the response for something you want pin output without pin obviously, and no idea whether it could discern by credID whether PIN is wanted or not so a dual-secret approach may be fun
nickray
commented
4 years ago
okay, so 2 questions:
1) is it possible to drop PIN Requirement for HMAC or make it optional or whatever 2) could we add a way to insert the pin for the 2 hmac commands.
because for me they just die with "PIN required" which obviously sux.
as they obviously can be (and are) used for things where the response actually us used for something like crypto it might be an interesting Idea to use different secrets for acting with and without pin. that way if one wants pin it cannot just be skipped. and as these things may run local you might not want the response for something you want pin output without pin obviously, and no idea whether it could discern by credID whether PIN is wanted or not so a dual-secret approach may be fun