Yubico Validation Servers support HTTPS for secure communication with validation clients. Additionally, the validation protocol also (optionally) uses HMAC-SHA1 signatures on request and response to verify message integrity. For more information, see the YubiCloud Validation Service guide.

Posted in: Security