RetroFed Forum
Your home away from modern life.
2fa.directory is blind to Cloudflare. Deceives users into a false sense of security.
Post Reply
AuthorMessage
evenwicht lemmy.sdf.org evenwicht@lemmy.sdf.org
Joined: 2024-07-01
Quote

2fa.directory catalogs services that use multifactor authentication. Of course the idea is to inform consumers of which services satisfy a basic standard of security. Services that are centralised on Cloudflare appear with a green checkmark, as if there is nothing wrong with sharing all your login details with a privacy abusing fiefdom in a country without privacy safeguards through a MitM arrangement.

If one of the auth factors has a MitM, thatโ€™s effectively 1 factor less. 2fa becomes like 1fa.

Itโ€™s a gross oversight and the bug tracker is limited to MS Github users. A Github user should raise an issue to point this out.

1   Original
Post Reply
Back to top