Skip to content

Instantly share code, notes, and snippets.

@oreoshake

oreoshake/gist:d6936d8ef61ee1cbf42bc836515743e4

Last active July 31, 2017 20:54
Show Gist options
  • Save oreoshake/d6936d8ef61ee1cbf42bc836515743e4 to your computer and use it in GitHub Desktop.
Save oreoshake/d6936d8ef61ee1cbf42bc836515743e4 to your computer and use it in GitHub Desktop.
Download ZIP
2fa flow
Raw
gistfile1.md

Current way:

  1. User starts the flow
  2. sudo challenge (https://github.com/blog/1513-introducing-github-sudo-mode)\*
  3. scan totp seed
  4. confirm totp seed
  5. Download recovery codes / confirm backup number / enroll in delegated recovery (one or more)
  • User "prints recovery codes
  • User copies recovery to clipboard and stores elsewhere
  • User downloads a file containing the recovery codes
  • User provides phone number verified by code delivered via SMS
  • User enrolls in delegated recovery with facebook
  1. Confirm recovery saved (options 1-3 above require manual confirmation)
  2. 🔒

Proposed way:

  1. User starts the flow
  2. sudo challenge (https://github.com/blog/1513-introducing-github-sudo-mode)\*
  3. Download recovery codes / confirm backup number / enroll in delegated recovery (one or more)
  • User "prints recovery codes
  • User copies recovery to clipboard and stores elsewhere
  • User downloads a file containing the recovery codes
  • User provides phone number verified by code delivered via SMS
  • User enrolls in delegated recovery with facebook
  1. scan totp seed
  2. confirm totp seed
  3. 🔒
  • sudo mode requires that a password has been entered recently.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment