<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Recent changes to 8601: email auth verification by link</title><link>https://forge-allura.apache.org/p/allura/tickets/8601/</link><description>Recent changes to 8601: email auth verification by link</description><atom:link href="http://forge-allura.apache.org/p/allura/tickets/8601/feed.rss" rel="self"/><language>en</language><lastBuildDate>Wed, 22 Apr 2026 21:45:13 -0000</lastBuildDate><atom:link href="http://forge-allura.apache.org/p/allura/tickets/8601/feed.rss" rel="self" type="application/rss+xml"/><item><title>#8601 email auth verification by link</title><link>https://forge-allura.apache.org/p/allura/tickets/8601/?limit=100#ce24</link><description>&lt;div class="markdown_content"&gt;&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;status&lt;/strong&gt;: in-progress --&amp;gt; review&lt;/li&gt;
&lt;/ul&gt;&lt;/div&gt;</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Dave Brondsema</dc:creator><pubDate>Wed, 22 Apr 2026 21:45:13 -0000</pubDate><guid>https://forge-allura.apache.org64e09abed00560440d4de5980b3f52e013a34e27</guid></item><item><title>email auth verification by link</title><link>https://forge-allura.apache.org/p/allura/tickets/8601/</link><description>&lt;div class="markdown_content"&gt;&lt;p&gt;With a link we can have a longer token for more security (still type-able if needed).  And the link will defeat some MITM phishing attacks, forcing you to the right site.&lt;/p&gt;
&lt;p&gt;We can apply this to 2FA accounts too (currently being skipped) so they get the MITM protections too&lt;/p&gt;
&lt;p&gt;Downside is if you don't have email access on the same computer you're logging in to :(&lt;/p&gt;&lt;/div&gt;</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Dave Brondsema</dc:creator><pubDate>Wed, 22 Apr 2026 21:43:55 -0000</pubDate><guid>https://forge-allura.apache.orgb197caaa7654f874a53e738bffc111946b5425b5</guid></item><item><title>email auth verification by link</title><link>https://forge-allura.apache.org/p/allura/tickets/8601/</link><description>&lt;div class="markdown_content"&gt;&lt;p&gt;Ticket 8601 has been modified: email auth verification by link&lt;br/&gt;
Edited By: Dave Brondsema (brondsem)&lt;br/&gt;
Status updated: 'in-progress' =&amp;gt; 'review'&lt;/p&gt;&lt;/div&gt;</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Dave Brondsema</dc:creator><pubDate>Wed, 22 Apr 2026 21:43:55 -0000</pubDate><guid>https://forge-allura.apache.orga6b56a43a6ad642d18f6769de0e2c3e3fcd6e7ab</guid></item></channel></rss>