#15 Unique Key Generation on user Registration for password reset

Fermé
créé il y a 4 ans par Uncled1023 · 3 commentaires

This key would allow a user to generate a password reset, without giving any personal information (phone, secondary email, etc).

This key would allow a user to generate a password reset, without giving any personal information (phone, secondary email, etc).
Uncled1023 a commenté il y a 4 ans
Propriétaire

This has changed slightly with the addition of the ability for a user to add a PGP Public Key to their account. If that key is present, the server will use it to encrypt a temp token, and then the user would have to decrypt it using their private key and enter the token to reset their password.

This has changed slightly with the addition of the ability for a user to add a PGP Public Key to their account. If that key is present, the server will use it to encrypt a temp token, and then the user would have to decrypt it using their private key and enter the token to reset their password.
Uncled1023 a commenté il y a 3 ans
Propriétaire

User’s can now have recovery emails. Lower priority now.

User's can now have recovery emails. Lower priority now.
Uncled1023 a commenté il y a 3 ans
Propriétaire

Users can now create authentication keys, so no real need. Closing until further notice.

Users can now create authentication keys, so no real need. Closing until further notice.
Connectez-vous pour rejoindre cette conversation.
Aucun jalon
Pas d'assignataires
1 participants
Échéance

Aucune échéance n'a été définie.

Dépendances

Ce ticket n'a actuellement pas de dépendance.

Chargement…
Annuler
Enregistrer
Il n'existe pas encore de contenu.