News for hackers. Stuff that matters.

A comment on Don't use third party auth to sign in. Parent comment

Re:Don't use third party auth to sign in by ukoki on Sunday November 15, 2020 @05:26AM (#25099942)
I meant using TOTP (app-based) two-factor authentication for securing your DNS provider and domain registrar accounts. The reason for not using SMS-based two-factor authentication is that it is not very secure https://techcrunch.com/2016/07/25/nist-declares-the-age-of-s...

I'm not aware of two-factor authentication for SMTP or IMAP.

[ Parent | on HN ]
Re:Don't use third party auth to sign in by u801e on Tuesday November 17, 2020 @07:28PM (#25131711)
> I'm not aware of two-factor authentication for SMTP or IMAP.

This could be achieved using a client side TLS certificate along with a username and password. I know that Postfix and Dovecot support it.

[ Parent | on HN ]