Hi, 

Google Authenticator is a software-based authenticator by Google that 
implements two-step verification services using the Time-based One-time 
Password Algorithm (TOTP; specified in RFC 6238) and HMAC-based One-time 
Password algorithm (HOTP; specified in RFC 4226), for authenticating users of 
software applications.

There are even cli tools that do the same stuff. I'd guess there is at least 
one on Debian.

No need for a mobile phone. 


Bernd 

Am 26. April 2020 10:06:14 MESZ schrieb Johannes Schauer <jo...@debian.org>:
>Quoting Bernd Zeimetz (2020-04-25 23:14:39)
>> On 4/25/20 10:05 PM, IOhannes m zmölnig (Debian/GNU) wrote:
>> > On 4/25/20 8:34 PM, Bernd Zeimetz wrote:
>> >> https://docs.gitlab.com/ee/security/two_factor_authentication.html
>> >>
>> >> Enforce that (if Salsa is doing that in the meantime,  ignore me).
>> > i hope you don't suggest to enforce 2FA system-wide for all users
>of salsa.
>> > i read you original mail as a requirement to enforce 2FA for users
>who
>> > want to use salsa as an authentication provider for their own
>> > applications (which is fine with me)
>> Actually I think 2FA should be enforced for everybody.
>> Even debian.org related passwords might get lost.
>
>I never used 2FA before, so I want to your link and then, to learn more
>about
>it to this one:
>
>https://docs.gitlab.com/ee/user/profile/account/two_factor_authentication.html
>
>There I read that I have to install some application on my iOS, Android
>or
>SailFish OS device. I do not own any device with either of those
>operating
>system and neither does anybody else in my household. I guess I would
>need to
>use Qemu to run an emulated Android on my laptop instead. But if I do
>that --
>how would that improve security at all?
>
>Thanks!
>
>cheers, josch

-- 
Diese Nachricht wurde von meinem Android-Gerät mit K-9 Mail gesendet.

Reply via email to