Re: Client OTP activation to secure web apps

For now I implemented a CSRF check on the given sites.


Dan <dan@nnnne-o-o-o.com> wrote:

> Hello,
>
> Between one migration and the others I came to fantasticate, or
> better, to conceive about the easy possibility to activate a web app
> without round trip, let say starting from a qrcode and finishing job
> with node.js on the client side maybe working on mirror.
>
> I would try tackle the matter on two sides. As first, I would like to
> deny my web app downloads from the repo by clients coming equipped
> with mirroring software; AFYI: there is excess use of it. As second,
> I would like to deny my web apps to activate interfaces if not via a
> client OTP code processed by my js library or php backend.
>
> Stating that I'm not drunk at all, does it exist any library of this
> kind to start from?
>
>
> Dan
>
> ------
> Blog: http://bsd.gaoxio.com - Repo: https://code.5mode.com
>
> Please reply to the mailing-list, leveraging technical stuff.
>




Dan

------
bsdload.com - Repo: https://code.5mode.com

Please reply to the mailing-list, leveraging technical stuff.