Weekly thread to discuss whatever you’re working on, big or small, at work or in your free time.

  • 0xD@infosec.pub
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    1
    ·
    1 year ago

    If you add any specific measure I could comment on that, but generally I think that user experience must be taken into account up to a point. You won’t disable 2FA so they don’t have to get their phone, but you implement it with SSO so logging in once is sufficient.

    Power users such as admins on the other hand should be able to understand and use higher security measures such as 2FA for every administrative login.