Il 24/06/24 16:54, Stephen Smoogen ha scritto:

> The corner case which makes this ineffective is
> ...

Sure, system security is affected by user actions too, but considering that the 
alternative is to have the vast majority of users will continue ignoring 2FA 
because it is not handy, using something in the background which is already 
present on the PC without requiring more actions from the user I think it would 
encourage the adoption of 2FA.

I don't know if there's a way to use the ssh keys to act as second factor, or 
maybe the kerberos authentication process with just the plain password could be 
encapsulated in a session encrypted with the key pair?

Mattia
--
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to