U2F Security Key (YubiKey) support
I suggest supporting U2F because security keys are the most secure method for 2FA. Unlike TOTP codes generated by an authenticator app, U2F keys are phishing-proof. They only work once you have registered them with a website.
In my opinion, it is worth improving NextDNS account security because:
1) Hacker who takes over NextDNS account will know user operating system, antivirus, online services, etc. This information will significantly help the hacker to prepare and conduct a successful attack.
2) Hacker can use the rewrites feature (in settings) to redirect the user to a malicious website.
6 replies
-
For the same reason (to improve account security), I also suggest voting for Tim Schuckelt idea:
Email Notifications
https://help.nextdns.io/t/35hzgl4/email-notifications
"It would be nice if you could enable the option to receive an email alert on successful login."This idea is about an option, which can be enabled/disabled depends on your preferences.
-
U2F isn't restricted to Yubikey.
Other keys like Nitrokey, Google Titan, Solokey works too.
-
Information about U2F security keys:
You Should Be Using Yubikeys!
https://www.youtube.com/watch?v=ybn9J4QCqK4or keys produced by:
https://www.nitrokey.com/
https://www.ftsafe.com/
https://solokeys.com/
https://thetis.io/
https://www.hypersecu.com/
https://store.google.com/us/product/titan_security_key?hl=en-US -
Must have! Can't wait
-
I think this feature really should be implemented, it's been 5 years! only TOTP for your literal DNS is really not good. I reccomend implementing FIDO2 non-residential 2FA, not a passkey. The reason for that is if people have their security keys filled up with passkeys they can still secure their NextDNS account.
Content aside
-
46
Votes
- 2 days agoLast active
- 6Replies
- 443Views
-
3
Following