79471904

Date: 2025-02-27 07:44:57
Score: 0.5
Natty:
Report link

Creating resident keys, which the question you linked to requires a pin as per the CTAP 2.1 specification step 10 and step 11 in makeCredential.

You also have that Chrome on assertion for example is implemented in such a way to block you from being able to use the device without some sort of user verification, which in the case of the Yubikey 5 is a pin and a user presence check. This isn't exactly required by the specifications, but given that using a resident key without any type of validation is a bit of a niche case it isn't unreasonable. There have been complaints Google does this though for example this bug

So no, I don't think you can expect being able to use it without pin input.

Reasons:
  • Long answer (-0.5):
  • No code block (0.5):
  • Low reputation (0.5):
Posted by: Asthor