[AsK IH] Idea Validation!
[AsK IH] Idea Validation! Would you like to secure your sites apart from a password and validate the browser itself as authorized 2nd factor via SaaS?
[AsK IH] Idea Validation! Would you like to secure your sites apart from a password and validate the browser itself as authorized 2nd factor via SaaS?
I also don't understand fully... my browser should be the second factor?
Some sites like upwork sent you another code in email to enter at login process for second factor authentication. It also ask to remember this browser for next login.
I've read this 3 times and have no idea what you've tried to say here.
Some sites like upwork sent you another code in email to enter at login process for second factor authentication. It also ask to remember this browser for next login
But the seconds factor is still e-mail and not the browser.
Technically yes. However once browser is authorised by entering code. Next login will simply use token save in browser to validate that second factor.
However instead of saving token. I intented to generate RSA keypairs in javascript and identify browser with its public key signature
I’m not sure how is this better? Tokens are signed and expire from time to time. You get no extra benefit if you use a public key. At least none that I can see?
True. It doesn't deliver better value in a SaaS
However, I have used RSA keypairs for 2-factor authentication for VPN and replaced physical RSA devices in another product. It was a mandatory requirement for PCI certification.
So we have that figured out :D