search

mozilla-lockwise / lockbox-extension

Experimental Firefox extension for login management experiences, not being actively developed
Mozilla Public License 2.0
127 stars 26 forks source link

allow ability to restrict login based on country geoip location or Mozilla Location Service #379

Open jawz101 opened 6 years ago

jawz101 commented 6 years ago

In another popular password manager they give an option to restrict logins to only allow access to the password manager from devices within certain countries.

When I am in my home country I only allow logins from my home country. If I travel to another country I add that country to my allowed countries temporarily. There are also public blocklists for TOR exit nodes which would also be nice from a security perspective. That way I can exclude TOR exit nodes from logging into my password manager as well.

Geo-IP address services and lists: https://location.services.mozilla.com https://developer.mozilla.org/en-US/docs/Web/API/Geolocation/Using_geolocation https://www.maxmind.com/en/geoip2-services-and-databases http://doc.emergingthreats.net/bin/view/Main/TorRules

about every other IP address blocklist on the Internet http://iplists.firehol.org firehol_anonymous and firehol_proxies are curated, aggregate IP address blocklists built on other datasets collected on the firehol project- which would be good choices for optionally blocking TOR exit nodes and anonymous proxy servers. I realize some people may use those services so they could be optional to block/allow.

jimporter commented 6 years ago

This seems like something to bring up with the Firefox Accounts team. We don't (directly) handle logins.

jawz101 commented 6 years ago

@jimporter that's actually an even better idea. You're saying it would generally restrict your Firefox Account to only log in from certain countries as a whole?

Where would I make that suggestion?

jimporter commented 6 years ago

This page suggests their GitHub project or Bugzilla component would be the right place. I have no idea what's on their radar generally though...