Tickets :: Comment on [#12301] Secondary authentication

* Your Email Address
* Spam protection	Enter the letters below: . .. ..__..__.. . \|\ \|\| \|[__][__]\| \| \| \\|\|__\|\| \|\| \|\|/\\|
Comment	>>>> Are you requesting two-factor authentication actually? >>> >>> What I am requesting is simpler, is "Application-specific passwords". >>> >>> Please see this: >>> https://support.google.com/accounts/answer/185833 >>> >>> And a video explaining it: >>> http://www.youtube.com/watch?v=zMabEyrtPRg&t=2m13s >>> >>> It is possible to implement this independently of Horde (eg: for >>> email it could be done in the imap server), but we need support for >>> SyncML and Activesync, and also a Horde module for the password >>> management. >> >> How would this work? ActiveSync needs authenticated access to Horde >> and the applications (not to mention access to the IMAP server >> through IMP). Using a different password for each application, or >> even just for ActiveSync access would prevent authentication to at >> least some of the data that is needed. > > Possible solution: for each app-specific password Horde stores the > backend password (eg: LDAP, IMAP) in an encrypted form. The > app-specific password is used as the encryption key. For safety > reasons, the app-specific password is not stored, only a hash of it. > > There might be other ways to implement it safely, this is just an idea. > > Please see the attachment. > > > >
Attachment
Watch this ticket