Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Idea: Include basic threat modeling to help users choose 2FA method #102

Open
conorgil opened this issue Jan 21, 2019 · 0 comments
Open
Labels
enhancement New feature or request Idea / Request for Comment These issues are meant to document longer term ideas and spark discussion and feedback.

Comments

@conorgil
Copy link
Owner

After someone says that they enabled 2fa on a site, ask them which method they enabled. Then, 2fan can record which methods of 2fa were available at the time they enabled 2fa and notify them if a new method becomes available in the future. Initially, could hard code the method rankings and notify on methods that are more secure and better ux. But, ideally it takes into account the users personal threat model based on them answering some questions and/or creating a custom ranking based on their own needs.

@conorgil conorgil added enhancement New feature or request Idea / Request for Comment These issues are meant to document longer term ideas and spark discussion and feedback. labels Jan 21, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request Idea / Request for Comment These issues are meant to document longer term ideas and spark discussion and feedback.
Projects
None yet
Development

No branches or pull requests

1 participant