cosign
cosign copied to clipboard
Fast timeout of authentication page an accessibility issue?
When performing tasks such as signing a blob, the authentication page that gets served to the user times out quickly. From a security perspective, it makes sense to serve the authentication page for a limited period of time. However, the short timeout could also be an accessibility issue for users that might take longer with the authentication process (people who navigate by keyboard or use a screen reader come to mind).
This might just be a situation where security trades off with accessibility, but wanted to get thoughts on a slight extension to this timeout period.
This issue was created in connection with friction log https://github.com/sigstore/docs/issues/184