Jeffrey Paul

I use CapRover only via the web interface, and I think supporting U2F via WebAuthn is valuable. https://webauthn.io/

I strongly recommend against the approach of complicating auth clients (like CI) in this way. The main reasons for using 2FA are to mitigate password reuse/phishing/credential stealing. In the case...

Note that if you do go for 2FA instead of just a 20 char min password length or something that would achieve much the same end, TOTP codes can be...

@s-kris SMS 2FA is strongly discouraged. Email 2FA isn’t much better.

This is a false statement. Someone able to steal the CapRover password (such as in the case where a password is reused and is compromised elsewhere) can use that to...

It seems to me that you have a few fundamental misunderstandings of how to design auth systems @githubsaturn, based on statements in this thread. As a CR user and security/authentication...

This just bit me. It's in `-team-edition` too as of 8c05689.

I'm suggesting that you just POST the data up, but POST up encrypted data. Let the server deal with it as it wishes.

92.0... is the latest available for download from the link on https://github.com/Eloston/ungoogled-chromium, which is https://ungoogled-software.github.io/ungoogled-chromium-binaries/

Nevermind, found the download link on Homebrew's site. If the binaries provided by you are available for direct download, why not link them from the README?