News for hackers. Stuff that matters.

A comment on Domain Matching 2FA.

Re:Domain Matching 2FA by 9dev on Saturday June 10, 2023 @03:30AM (#36268469)
Instead of placing the numbers in the path, why not use a subdomain, e.g. 5678.example.com, and have that routed using a wildcard DNS record, then let users copy-paste the full domain name?
[ Parent | on HN ]
Re:Domain Matching 2FA by joskvw on Saturday June 10, 2023 @11:42AM (#36271487)
This is a valid approach, but it might lead to a more complicated setup compared to the alternative approach shown in the article (example.com/5678).
[ Parent | on HN ]