Task #7179: Add Slowdown/Cooldown in TOTP verification/serializer - Open Infrastructure - ungleich redmine

Custom queries

Assigned & STILL new
feedback required
my tasklist
open (by assignee)
open (by due date)
open (by priority)
open (by project)
open (unassigned)

Actions

Copy link

Task #7179

closed

Add Slowdown/Cooldown in TOTP verification/serializer

Added by Ahmed Bilal about 5 years ago. Updated 11 months ago.

Status:

Rejected

Priority:

Normal

Assignee:

Nico Schottelius

Target version:

Start date:

09/28/2019

Due date:

09/30/2019

% Done:

Estimated time:

PM Check date:

History
Notes
Property changes

Actions

Copy link

Updated by Ahmed Bilal about 5 years ago

While, implementing cool down, we need to keep in mind the applications (ucloud-api, etc) that are verifying OTP credentials on behalf of users. They are not abusing the OTP verification themselves. So, to keep track of the real abuser we may need to have IP address of actual user or some other mechanism to track him/her to cool down the OTP verification only for him/her. If we use IP to track the originator of request (that need OTP verification), we need each application in middle to forward the ip to the ungleich-otp as well. What do you think about it?

Actions

Copy link