Multi-factor authentication

Sort:
Avatar of MieszkoTheFirst

It is 2021, folks. Unacceptable for any webapp to not offer MFA. Even worse when accounts are linked to real world titled players. Especially on a site that handles real-money transactions. It's the 101 of IT security. Show some responsibility.

Avatar of Martin_Stahl
MieszkoTheFirst wrote:

It is 2021, folks. Unacceptable for any webapp to not offer MFA. Even worse when accounts are linked to real world titled players. Especially on a site that handles real-money transactions. It's the 101 of IT security. Show some responsibility.

 

Staff have posted before that mult-factor authentication wasn't going to happen for non-privileged accounts. That was a year or two ago but I haven't heard any change in that stance.

Avatar of MieszkoTheFirst
Martin_Stahl wrote:
MieszkoTheFirst wrote:

It is 2021, folks. Unacceptable for any webapp to not offer MFA. Even worse when accounts are linked to real world titled players. Especially on a site that handles real-money transactions. It's the 101 of IT security. Show some responsibility.

 

Staff have posted before that mult-factor authentication wasn't going to happen for non-privileged accounts. That was a year or two ago but I haven't heard any change in that stance.

Yeah I found a comment from one of the founders in the meantime. That means I'm gonna make use of the free trial and then cancel instead of keeping my Diamond subscription. Not gonna support a company that deliberately puts customers at risk by refusing to implement fundamental security measures. Which takes an experienced developer about a weekend worth of time. Over at the open-source competitor with one paid developer it's been offered for >3 years.

Avatar of Martin_Stahl

It has nothing to do with  the ability to do it. It exists for privileged accounts. It has a lot more to do with the additional support needs, based in what I've seen posted.

Avatar of MieszkoTheFirst
Martin_Stahl wrote:

It has nothing to do with  the ability to do it. It exists for privileged accounts. It has a lot more to do with the additional support needs, based in what I've seen posted.

Even if there were "additional support needs": This is a for-profit company. Support for fundamental security measures is part of what they are supposed to offer to customers. I've been a paying user back in 2018 already, now I wanted to give the site another try. Haven't seen much change, not only regarding MFA.

Eventually they will offer it to everybody, since the world is moving away from traditional logins anyway and the majority of people is going to expect it at some point.

Avatar of Martin_Stahl

Maybe they will at some point, though I imagine it's not terribly likely. Or if it happens it will be available only to premium members.

 

As to changes, there are changes happening all the time.