Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Discourage webauthn user interaction #21880

Merged
merged 1 commit into from
Jul 20, 2020
Merged

Conversation

rullzer
Copy link
Member

@rullzer rullzer commented Jul 16, 2020

Else people might have the feeling this is also doing 2FA. And since it
is only prefered it can be ignored and hacked around.

Once we have proper 2FA with webauthn in one go this probably needs to
be revisted.

Signed-off-by: Roeland Jago Douma roeland@famdouma.nl

Else people might have the feeling this is also doing 2FA. And since it
is only prefered it can be ignored and hacked around.

Once we have proper 2FA with webauthn in one go this probably needs to
be revisted.

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
@rullzer rullzer added enhancement 3. to review Waiting for reviews labels Jul 16, 2020
@rullzer rullzer added this to the Nextcloud 20 milestone Jul 16, 2020
@MorrisJobke MorrisJobke merged commit 9271d65 into master Jul 20, 2020
@MorrisJobke MorrisJobke deleted the webauthn/discourage_user_auth branch July 20, 2020 07:24
@rullzer
Copy link
Member Author

rullzer commented Jul 20, 2020

/backport to stable19

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
3. to review Waiting for reviews enhancement
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants