Helmut K. C. Tessarek

May I ask, why email should be used as a default 2FA? IMO there are 2 MFA systems that are not really safe: email and SMS (text). I believe it's...

Thanks a bunch for the explanation. I didn't know the flow, but just remembered that I can setup TOTP as a 2FA in the web vault. Well, at least email...

The vw devs usually keep in sync what Bitwarden does. Even, if it's questionable on bw's side. I think it would be best to get this fixed in bw first.

Nice change. P.S.: Just to clarify, this means I can delete the `rsa_key.pub.pem` file from my vw data directory, correct?

In theory that makes sense, but I see a case where you'd run into an issue. You start vw and the key is generated and used. You invite someone or...

May I ask what the status of this PR is? I am asking because maybe I can help with something.

So... bw closed the PR claiming they will come up with a different solution. So I guess this PR can either be merged or closed. IMO allowing 50k instead of...

Send me an email and I'll let you know what I think. I will not post this publicly.

> The clients will ignore the websocket request if the uuid matches. Hmm, aren't the websocket requests supposed to work for a specific device? Thus the device (client) should ignore...

Ah, ok. For some reason I had the impression that some event had to be sent to a signle device, but yep, it's basically a broadcast. Thus I had it...