How to add Two-Factor Authentication to your website with Google Authenticator

Re:How to add Two-Factor Authentication to your website with... by fusiongyro on Thursday April 11, 2013 @05:06PM (#5534805)

I might consider it an advantage if Google isn't able to snuff out my user's accounts/access with impunity. I don't understand the technology enough to know whether that is the case, but I wouldn't rely on Google for authentication at this point for this reason.

[ Parent | on HN ]

Re:How to add Two-Factor Authentication to your website with... by jf on Thursday April 11, 2013 @05:12PM (#5534848)

TOTP is surprisingly easy to understand and implement. I do my best to explain how it works in the "Understanding TOTP" section of this article. Take a look at that section and let me know if it makes sense.

[ Parent | on HN ]

Re:How to add Two-Factor Authentication to your website with... by fusiongyro on Thursday April 11, 2013 @05:21PM (#5534898)

What's ambiguous about it is whether or not I need a Google account (and whether Google having taken away that account, I can still log into your service). The "Understanding TOTP" section seems to be saying that you don't and they can't, in which case there's nothing to object to.

[ Parent | on HN ]

Re:How to add Two-Factor Authentication to your website with... by jf on Thursday April 11, 2013 @07:04PM (#5535416)

Great feedback, thanks. I've updated the "Adding Google Authenticator" section with a note that should make that less ambiguous.

[ Parent | on HN ]