Recovery and HOTP/TOTP/FIDO support

northox / roundcube-yubikey-plugin

A plugin to use Yubico's Yubikey 2nd factor with Roundcube webmail

GNU General Public License v2.0

31 stars 6 forks source link

Recovery and HOTP/TOTP/FIDO support #8

Open ib54003 opened 9 years ago

ib54003 commented 9 years ago

Hey maybe it would be cool to support FIDO ("https://fidoalliance.org/specifications/overview/") or HOTP/TOTP. Also a recovery funciton would be usefull in case u lost your yubikey ;).

northox commented 9 years ago

Hello ib54003,

I'd be interested in integrating FIDO U2F as it's a new standard that's getting a lot of push but currently don't have any cycles for this. Maybe in the future or if I get more request of it. For the record, here's a few reference:

client lib: https://github.com/Yubico/u2fval-client-php
other refs: https://security.stackexchange.com/questions/71316/how-secure-are-the-fido-u2f-tokens

I know Yubikey do support HOTP/TOTP but could you explain the value of doing so? So far, you're the only one who as been asking for this and I'm not quite sure there's a big market for it.

Either way I'm open to Pull Request though. ;)

K0HAX commented 8 years ago

I'll add a +1 to requesting support for FIDO U2F.

ib54003 commented 8 years ago

any news?

northox commented 8 years ago

Nothing tangible no. So far, it seems like it would be better for me to fork this project into a separate one: either you use Yubico auth, or you use U2F.

I might have some time during holiday vacation but no guarantee - I have other projects running https://mantor.org and https://danny.mantor.org/qubes-rumprun/.

corbolais commented 5 years ago

Hi, I'm looking for a roundcube plugin featuring support for FIDO U2F. Be it via yubikey or solokeys doc (how to get).

The topic is already four years old.

Anything new to the repo in this regard?

cheers

northox commented 5 years ago

No. No time/intention to put invest on this but I welcome pull requests.