3 ms·
Definitely checkout https://en.wikipedia.org/wiki/Two-factor_authentication https://en.wikipedia.org/wiki/Two-factor_authentication . If a password is compromi
by hellbanner 11y ago
Definitely checkout https://en.wikipedia.org/wiki/Two-factor_authentication https://en.wikipedia.org/wiki/Two-factor_authentication .
If a password is compromised, data is protected.
- icebraining 11y agoThat's authentication, but OP is asking about authorization.
- eterm 11y agoThat is authentication, which is orthogonal to authorisation. It's very common to see a system with a reasonable authentication system which is yet compromised by having little to no authorisation. (A classic example of this is where after logging in as a normal user, you can still hit the /admin/ endpoint.)