revoltchat / backend

Monorepo for Revolt backend services.
https://developers.revolt.chat/api/
Other
1.23k stars 140 forks source link

feature request: Account Login using Unique User Identifier + 2FA #383

Closed Zig-Rust-Odin closed 1 day ago

Zig-Rust-Odin commented 2 days ago

What do you want to see?

Login , no email, no password,

revolt


Encrypting Email Don’t. Email is insecure. Even with PGP, it’s default-plaintext, which means that even if you do everything right, some totally reasonable person you mail, doing totally reasonable things, will invariably CC the quoted plaintext of your encrypted message to someone else (we don’t know a PGP email user who hasn’t seen this happen). PGP email is forward-insecure. Email metadata, including the subject (which is literally message content), are always plaintext. https://www.latacora.com/blog/2019/07/16/the-pgp-problem/

Zomatree commented 1 day ago

We don't plan on removing the email requirement, this is to help prevent spam and malicious use, moderation and contacting the user.

Zig-Rust-Odin commented 1 day ago

hi bro Email, can't stop spam mail

I can register 30 proton mails at once to send spam mails to your room

MCausc78 commented 1 day ago

hi bro Email, can't stop spam mail

I can register 30 proton mails at once to send spam mails to your room

There are CAPTCHAs. You won't be just able to register ton of accounts. You will need to solve CAPTCHA manually.

Zig-Rust-Odin commented 1 day ago

Bypassing CAPTCHA is so easy, it's done automatically.