BitFolk » Panel

2016-05-05

09:40 Feature #117: Two factor auth for https://panel.bitfolk.com/

heavy-lifting wrote:
> the TOTP feature on 1Password was news to me - it was easy to set up.
Thanks, good to know... admin

09:24 Feature #117: Two factor auth for https://panel.bitfolk.com/

I've just added 2FA and configured it using 1Password and it seems to work fine. Even without really known what I was... heavy-lifting

08:51 Feature #117: Two factor auth for https://panel.bitfolk.com/

admin wrote:
> robert wrote:
> > I've just set up MFA on the test panel and it works perfectly!
>
> Good to hear... robert

08:45 Feature #117: Two factor auth for https://panel.bitfolk.com/

admin wrote:
> Ah good idea, so like, it asks you to put a token in and only enables 2FA if you get that right?
Y... halleck

08:38 Feature #117: Two factor auth for https://panel.bitfolk.com/

halleck wrote:
> I would suggest requiring that the user enters a valid TOTP code during the 2FA setup process.
A... admin

08:36 Feature #117: Two factor auth for https://panel.bitfolk.com/

halleck wrote:
> ...logging in appear to succeed when it's supposed like, as well as failing when it's not supposed ... halleck

08:35 Feature #117: Two factor auth for https://panel.bitfolk.com/

robert wrote:
> I've just set up MFA on the test panel and it works perfectly!
Good to hear. Are you happy with h... admin

08:31 Feature #117: Two factor auth for https://panel.bitfolk.com/

Ok, I have now done some quick testing at enabling 2FA at https://testpanel.bitfolk.com/, and it logging in appear to... halleck

08:28 Feature #117: Two factor auth for https://panel.bitfolk.com/

I've just set up MFA on the test panel and it works perfectly! robert

08:14 Feature #117: Two factor auth for https://panel.bitfolk.com/

I've implemented TOTP 2FA on the panel test site and would appreciate some user testing of it to check it is fit for ... admin

05:52 Feature #117: Two factor auth for https://panel.bitfolk.com/

Is it actually justified to disable email password resets just because two-factor authentication is enabled?
If 2FA ... admin

2016-05-04

16:45 Feature #117: Two factor auth for https://panel.bitfolk.com/

We are also going to need to either use the same 2FA for SSH to Xen Shell, or else allow it to be made key-only. As i... admin

2016-05-03

18:27 Feature #117: Two factor auth for https://panel.bitfolk.com/

Definitely, I think it's fair to say that someone prepared to enable MFA is accepting responsibility for not losing t... robert

18:09 Feature #117: Two factor auth for https://panel.bitfolk.com/

I assume use of optional 2FA should be incompatible with any form of automated email password reset, yes? admin

18:05 Feature #72: Tool for clearing DNS cache

I see that both Google Public DNS and OpenDNS allow it:
* https://developers.google.com/speed/public-dns/cache
* ... admin

17:57 Feature #117: Two factor auth for https://panel.bitfolk.com/

I just wanted to register my support for this. TOTP is now a widely deployed, mature technology and given that gaini... robert

17:44 Feature #72: Tool for clearing DNS cache

I agree that there are security implications from this request and on consideration don't see it as a particularly se... robert

17:37 Feature #136 (New): Prepopulate Stripe form with contact details

When you pay by Stripe you are asked to enter your name, email address and postal address - all information that BitF... robert

2016-04-18

00:53 Feature #134: Transition from using ssh-vulnkey to using ssh-keygen to validate keys

ssh-vulnkey doesn't exist in jessie and really ssh-keygen should be used there to validate key data, so I'll now rena... admin

00:51 Feature #134 (In Progress): Transition from using ssh-vulnkey to using ssh-keygen to validate keys

Okay, I've now added configuration that disables SSH public key validation so it's now possible to add keys that ssh-... admin

2016-04-17

12:39 Feature #134 (In Progress): Transition from using ssh-vulnkey to using ssh-keygen to validate keys

It's not currently possible to add ed25519 algorithm SSH public keys to the panel because the blacklisted/valid key c... admin