3 ms·
I would argue that Namecheap shouldn't be on that list. They send out a 6 digit code and then immediately tell you what number it begins with, reducing the code
by RKearney 10y ago
I would argue that Namecheap shouldn't be on that list. They send out a 6 digit code and then immediately tell you what number it begins with, reducing the code to effectively 5 digits. Their continued refusal to support RFC 6238 shows they don't take this seriously in my opinion.
- superuser2 10y agoDoes it matter whether it's 6 digits or five? Surely any rate limiting is going to make either effectively impossible to brute force before the code expires and a new one is generated.
- cpach 10y agoPlease consider sending them a pull request: https://github.com/2factorauth/twofactorauth/pulls https://github.com/2factorauth/twofactorauth/pulls