I was thinking that if we realize that 2 factor authentication is too much work (or if we wanna do it in addition to that), it might be cool to use keyfiles in addition to password to authenticate the user.
So, we generate a random file at the time of registration, and then the user has to input the file in addition to the master password to decrypt his credentials.
This would not require any change on the server side, and is pretty much independent from all the rest of the code, so it would be an easy add on to implement if we have extra time.
AMarcedone
commented
9 years ago
I was thinking that if we realize that 2 factor authentication is too much work (or if we wanna do it in addition to that), it might be cool to use keyfiles in addition to password to authenticate the user.
So, we generate a random file at the time of registration, and then the user has to input the file in addition to the master password to decrypt his credentials.
This would not require any change on the server side, and is pretty much independent from all the rest of the code, so it would be an easy add on to implement if we have extra time.