5 ms·

Thanks for going 2factor and even better: using google authenticator. Two factor is too easy and adds too much to user security to be avoided. Furthermore, I th

Thanks for going 2factor and even better: using google authenticator. Two factor is too easy and adds too much to user security to be avoided. Furthermore, I think google authenticator should become the standard to increase usage longterm, so much so I made a service to make implementing it even easier: https://www.gauthify.com https://www.gauthify.com

beryllium 14y ago
Checking it out - looks like your PHP lib doesn't explicitly declare CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER, so that could be vulnerable to peerjacking. If I have some free time tonight I might be able to submit a PR for it.
- Goopplesoft 14y ago
  Hey, sorry didnt check HN comments till now. I will push a fix up for this today.