On 1/15/21 12:39 PM, o1bigtenor wrote:
On Fri, Jan 15, 2021 at 11:14 AM Gabriele Bulfon via Info
<info@xxxxxxxxxxxxxxxxxx> wrote:
Hi, is there any possibility to have Cyrus Imap run some kind of two factor authentication?
Be it OTP or OAuth or anything else that will be supported by imap clients.
Greetings
I am a 'rural' person and my stupid phone coverage is about a
wonderful and likely as
finding honest politicians. I have therefore become most vehemently
anti any kind of
authentication that necessitates the use of a 'stupid phone'. I would
suggest that
demanding the use of serious passwords would make the need for such more than
one factor authentication much less likely.
This may never be an issue for you but this is almost a daily problem
here and the
industry (computer) seems to believe otherwise therefore my interjecting!
multi-factor authentication does not immediately mean SMS.
And SMS is not the best extra factor
https://cacm.acm.org/magazines/2020/12/248798-security-analysis-of-sms-as-a-second-factor-of-authentication/fulltext
I have seen people use a phone call with "press 1" as the check.
There are the GoogleAuthenticator or Authy type systems.
The thing is that the mail readers would need to support MFA and I am
not sure what the state of that is these days.
I wonder if client certificates could be used to make sure the TLS links
are allowed only between authorized clients and the server?
Regards
--
Alvin Starr || land: (647)478-6285
Netvel Inc. || Cell: (416)806-0133
alvin@xxxxxxxxxx ||
------------------------------------------
Cyrus: Info
Permalink: https://cyrus.topicbox.com/groups/info/T0cce10bfd349100c-M2ca22344caf410bdf07afb4f
Delivery options: https://cyrus.topicbox.com/groups/info/subscription
