Timeline for How to store MFA secret
Current License: CC BY-SA 4.0
2 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 24, 2020 at 11:53 | comment | added | cornelinux | This is the way how commercial solutions do it. After all you want to be able to access the 2nd factor secrets. The systemwide encryption key is simply not accessable in the database. So dumping the database is not enough to get the OTP secrets. Your vault could be anything from a key file to an external hardware security module. | |
| May 20, 2020 at 8:42 | history | answered | phisch | CC BY-SA 4.0 |