Re: Trivial Pigeonhole patch: allow X-Original-From header for address tests

2022-07-03 Thread Aki Tuomi
> On 23/06/2022 07:14 EEST Rob Foehl wrote: > > > Motivated by more DMARC silliness, naturally. > > -Rob Hi Rob! Any chance you could open this as pull request to https://github.com/dovecot/pigeonhole? Aki

Re: Is multi factor authentication practical/feasible?

2022-07-03 Thread John Gateley
Disclaimer: I work for Auth0 (now Okta) On 7/3/22 9:40 AM, Paul Kudla (SCOM.CA Internet Services Inc.) wrote: It seems any kind of dual auth will need a security app running on YOUR server saving toikens, logins etc etc Not necessarily. With Auth0, the IDP runs on Auth0's server. You are

Re: Is multi factor authentication practical/feasible?

2022-07-03 Thread Paul Kudla (SCOM.CA Internet Services Inc.)
Please note this is my opinion only It seems any kind of dual auth will need a security app running on YOUR server saving toikens, logins etc etc this is what lead to microsoft, gmail etc having their own api which will only work for them this is also (mainly because of https authing the

Re: Is multi factor authentication practical/feasible?

2022-07-03 Thread John Gateley
On 7/3/22 8:31 AM, John Gateley wrote: The protocols were designed long before SAML and OIDC. SAML/OIDC give you more control over authn/z and allow easily adding in MFA or other different types of auth. To do this right, you'd need to extend the protocol to allow OIDC or SAML. I did find

Re: Is multi factor authentication practical/feasible?

2022-07-03 Thread John Gateley
On 7/1/22 1:02 PM, Jochen Bern wrote: On 27.06.22 00:52, Steve Dondley wrote: I have a small client whose insurance company insists they have MFA for their email to be covered under some kind of data protection policy. *Totally* theorizing here, but as far as I'm aware, the SMTP (AUTH), POP,

Re: Is multi factor authentication practical/feasible?

2022-07-03 Thread Sam Kuper
On Sat, Jul 02, 2022 at 07:32:21AM -0800, justina colmena ~biz wrote: > Guns are banned and there's a night guard with a Big Mag flashlight or > a billy club walking the beat around the bank, kicking a homeless man > who fell asleep on the sidewalk to tell him wake up or your pocket's > going be