Re: [PLUG] Add gmail like security enhancements to rainloop?

2019-02-13 Thread Ben Koenig
The authentication systems used by these websites are often based on OpenID https://en.wikipedia.org/wiki/OpenID https://openid.net/ They provide a "framework" that you can use to implement a solid authentication. That way you don't need to reinvent all the wheels. Google and Facebook act as

Re: [PLUG] Add gmail like security enhancements to rainloop?

2019-02-12 Thread Daniel Hedlund
On Tue, Feb 12, 2019 at 12:25 AM Michael Christopher Robinson < mich...@robinson-west.com> wrote: > inexpensively add GPS equipment to Linux laptops and desktops so that > in theory I should be able to send my GPS coordinates to the server. > GPS only provides "something you know" and not

Re: [PLUG] Add gmail like security enhancements to rainloop?

2019-02-12 Thread Louis Kowolowski
Have you considered doing client cert instead? It sounds like it may be less work. > On Feb 12, 2019, at 2:25 AM, Michael Christopher Robinson > wrote: > > So SMS isn't that secure... I figured as much. I'm thinking I can > inexpensively add GPS equipment to Linux laptops and desktops so

Re: [PLUG] Add gmail like security enhancements to rainloop?

2019-02-12 Thread Michael Christopher Robinson
So SMS isn't that secure... I figured as much. I'm thinking I can inexpensively add GPS equipment to Linux laptops and desktops so that in theory I should be able to send my GPS coordinates to the server. If the server receives acceptable GPS coordinates and a valid client identifier from the

Re: [PLUG] Add gmail like security enhancements to rainloop?

2019-02-11 Thread Daniel Hedlund
On Mon, Feb 11, 2019 at 8:34 PM Michael Christopher Robinson < mich...@robinson-west.com> wrote: > Third, how do I modify rainloop to ask which of three plausible numbers > the secret number is? Is there a better way to toughen up security? I don't know of any sites/tools that let you easily

[PLUG] Add gmail like security enhancements to rainloop?

2019-02-11 Thread Michael Christopher Robinson
If you try to log into your gmail account on a Linux desktop, it's typical that you get a text on your smartphone and have to indicate what secret number you received in that text in your firefox session on Linux. I think I want that for my CentOS 7 server running rainloop community edition.