[members-discuss] Webauthn

Thanks for bringing this up Bogdan. I fully agree, and I think it’s something that can ensure better account security for the RIPE members.

I think as a minimum, multiple keys must be supported, and also, ideally, there should be an option to only use WebAuthn, and not any other system, such as fallback to TOTP.

Antonis 

> On 2 Oct 2020, at 02:18, Bogdan I. <admin at redcluster.net> wrote:
> 
> Hello
> 
> What would be your opinion of implementing Webauthn / U2F by security keys for the RIPE NCC website's two factor authentication, in addition to the current TOTP system?
> 
> The current TOTP based system works fine, but i find using a physical security key to be more convenient and more secure.
> 
> -- 
> Bogdan Ionescu
> Redcluster LTD
> 
> 
> _______________________________________________
> members-discuss mailing list
> members-discuss at ripe.net
> https://mailman.ripe.net/
> Unsubscribe: https://lists.ripe.net/mailman/options/members-discuss/daknob%40daknob.net