Two-factor authentication?

[kservik]

Originally Posted by FredOnline

Where is it, Kim?

How can I use it?

I'm a long-time user of Runbox, and I really - REALLY - want to use your 2FA on webmail.

We cant put it into production before all the services (Exim, Dovecot, Webmail) talk with the new Authentication Service. It wont be much 2FA if we have 2FA for the webmail, but it is possible to log in with IMAP or SMTP with the same password without 2FA.

We have built 2FA and the Authentication Service, but the integration with Exim is not finished.

Then we need a beta-phase and a lot of testing.

Kim

[FredOnline]

Originally Posted by kservik

We cant put it into production before all the services (Exim, Dovecot, Webmail) talk with the new Authentication Service. It wont be much 2FA if we have 2FA for the webmail, but it is possible to log in with IMAP or SMTP with the same password without 2FA.

We have built 2FA and the Authentication Service, but the integration with Exim is not finished.

Then we need a beta-phase and a lot of testing.

You dangle the bait and then snatch it away.

So disappointing.

[kservik]

Originally Posted by FredOnline

You dangle the bait and then snatch it away.

So disappointing.

Well, we are almost finished with the project so no point in loosing hope now

Kim

[tomhab]

How would 2FA work with IMAP? I had assumed there would just be a separate password for using IMAP and SMTP...?

[dbowdley]

Originally Posted by tomhab

How would 2FA work with IMAP? I had assumed there would just be a separate password for using IMAP and SMTP...?

Yes, that's correct. This is why we had to develop a new authentication system in addition to the 2FA specific components as there was previously no way for different services to have different login methods/details.