Two Factor Authentication (2FA)

DangerOnTheRanger / maniwani

Imageboard software for the 21st century

MIT License

75 stars 11 forks source link

Two Factor Authentication (2FA) #112

Open DonaldTsang opened 5 years ago

DonaldTsang commented 5 years ago

This would be useful for both core board and autonomous board management

Email + referral email
- Requires email server (easier)
- Has well-established flask plugins
- Could rely on cock.li service (might need negotiation)
Mobile Application (e.g. Telegram, RocketChat)+ PIN Code
- Requires application bot (harder)
- Do not use Whatsapp, Messenger, Twitter or SMS
- Might need further refinements on what software to use or not to use

DangerOnTheRanger commented 5 years ago

2FA is a good security concept, but properly supporting the various platforms that people will want to use will take a long time. I'd like to add it at some point, but I don't have time to personally work on it for now.

DonaldTsang commented 5 years ago

@DangerOnTheRanger then I would like to ask you a question: Would email 2FA be preferable to using social media? And what other factors for choosing one or another is not shown in the description?

DangerOnTheRanger commented 5 years ago

Email would be fine, but I would prefer to at least support Slack as an additional verification platform. I'm not going to run the infrastructure for any 2FA backend myself except where it concerns Futatsu, so that's not a problem to me. I just simply have limited time, and doing 2FA properly will take a little while.