Recent changes to 8601: email auth verification by linkhttps://forge-allura.apache.org/p/allura/tickets/8601/2026-04-22T21:45:13.677000ZRecent changes to 8601: email auth verification by link#8601 email auth verification by link2026-04-22T21:45:13.677000Z2026-04-22T21:45:13.677000ZDave Brondsemahttps://forge-allura.apache.org/u/brondsem/https://forge-allura.apache.org64e09abed00560440d4de5980b3f52e013a34e27<div class="markdown_content"><ul>
<li><strong>status</strong>: in-progress --> review</li>
</ul></div>email auth verification by link2026-04-22T21:43:55.933000Z2026-04-22T21:43:55.933000ZDave Brondsemahttps://forge-allura.apache.org/u/brondsem/https://forge-allura.apache.orgb197caaa7654f874a53e738bffc111946b5425b5<div class="markdown_content"><p>With a link we can have a longer token for more security (still type-able if needed). And the link will defeat some MITM phishing attacks, forcing you to the right site.</p>
<p>We can apply this to 2FA accounts too (currently being skipped) so they get the MITM protections too</p>
<p>Downside is if you don't have email access on the same computer you're logging in to :(</p></div>email auth verification by link2026-04-22T21:43:55.933000Z2026-04-22T21:43:55.933000ZDave Brondsemahttps://forge-allura.apache.org/u/brondsem/https://forge-allura.apache.orga6b56a43a6ad642d18f6769de0e2c3e3fcd6e7ab<div class="markdown_content"><p>Ticket 8601 has been modified: email auth verification by link<br/>
Edited By: Dave Brondsema (brondsem)<br/>
Status updated: 'in-progress' => 'review'</p></div>