search

wbbaddons / Tims-2Factor-Auth

Allows users to protect their account by a requiring an unique code at login.
http://tims.bastelstu.be
BSD 3-Clause "New" or "Revised" License
7 stars 1 forks source link

Check which plugins are conflicting #3

Open TimWolla opened 11 years ago

TimWolla commented 11 years ago

I'm pretty sure that tapatalk/wbb does not work (does not need and does not support 2 factor authentication). The question is: <excludepackage> for security or not?

NetzwergX commented 11 years ago

Why would you even want to install 2-factor authentication, when you install another security nightmare (tapatalk) at the same time?

If tapatalk were to use the WBB API internally, I'd not exclude it, because then you could just disallow the plugin access once the user uses 2-factor authentication. But afaik they read directly from database. => Exclude, since using those two together doesn't make sense anyway. So why bother to offer 2-factor authentication, when you allow another plugin to completely circumvent it? makes no sense at all.

TimWolla commented 11 years ago

@NetzwergX That's exactly what I thought as well, therefore tapatalk is excluded now :)