Add an option to disable two step verification providers

Currently, the built-in providers
  • Backup Codes
  • Email confirmation
  • Verification code via app
are always active (if TFA isn't entirely disabled).

But those providers are not equal (in terms of usability and security); especially Email confirmation seems somewhat cumbersome, leaks data and should be considered rather insecure (nobody knows if the email isn't forwarded unencrypted at some point for exmple).

This is even documented in the description:
Other two-step...
Click to expand...

Read more

Читать далее...
 
Активность
Пока что здесь никого нет
Назад
Верх Низ