4 ms·
I don’t know the answer, but this is a pet peeve of mine. It’s especially frustrating when sites won’t let you enroll for 2FA with a hardware token. Instead t
by cvwright 3y ago
I don’t know the answer, but this is a pet peeve of mine.
It’s especially frustrating when sites won’t let you enroll for 2FA with a hardware token. Instead they require that you start with some crap “authenticator” app first. Looking at you here, Gitlab and ProtonMail.
- mattrick 3y agoI believe Gitlab has supported hardware keys for years now. At least Gitlab.com, not sure about the self hosted one.
- doodlesdev 3y agoAlso Protonmail supports both U2F and FIDO2. Introduced october last year [0]. [0]: https://proton.me/blog/security-keys https://proton.me/blog/security-keys
- cvwright 3y agoYes, but in order to enable it, they require that you enable an app first. I can only assume that this tactic is usually an attempt to maybe get your phone number, depending on which phone-based method you choose. Which is especially weird for ProtonMail.
- doodlesdev 3y agoIt does not require a phone number.
- turnsout 3y agoFwiw, Gitea now supports WebAuthn!