Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Does this mean that you ping them whenever you ssh? Does this mean that if their service is down you won't be able to ssh anymore?


From https://github.com/authy/authy-ssh/blob/master/authy-ssh#L11...:

    Default action when api.authy.com cannot be contacted:
    
      1. Disable two factor authentication until api.authy.com is back
      2. Don't allow logins until api.authy.com is back


What?! This is an online method? Why don't people just use Google Authenticator? It's totally offline, on both ends.


The video shows two options for this situation. Either allow access despite the outage, or deny access due to the outage.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: