3 ms·
I was wondering when Github was going to start supporting HSTS and 2-Factor Auth. I'm betting that it gets bumped in priority after this event. Nothing like an
by dguido 14y ago
I was wondering when Github was going to start supporting HSTS and 2-Factor Auth. I'm betting that it gets bumped in priority after this event. Nothing like an incident to move along security requirements!
http://dev.chromium.org/sts http://dev.chromium.org/sts
https://www.duosecurity.com/features https://www.duosecurity.com/features
- oijaf888 14y agoWhy use duosecurity over something like RFC 6238 and RFC 4226?
- moxie 14y agoI don't think either would help in this situation. HSTS helps prevent SSL stripping attacks, which whoever is denying SSL access to GitHub doesn't need to bother with. 2FA serves as an annoyance to phishers, but whoever is doing this network attack has direct access to your session cookie.
- technoweenie 14y agoWe've supported HSTS for for well over a year now.