[Tickets #12301] Re: Secondary authentication

[noreply at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/12301
------------------------------------------------------------------------------
  Ticket             | 12301
  Updated By         | Michael Rubinsky <mrubinsk at horde.org>
  Summary            | Secondary authentication
  Queue              | Horde Base
  Version            | Git master
  Type               | Enhancement
  State              | Feedback
  Priority           | 1. Low
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


Michael Rubinsky <mrubinsk at horde.org> (2013-08-07 04:38) wrote:

>> Are you requesting two-factor authentication actually?
>
> What I am requesting is simpler, is "Application-specific passwords".
>
> Please see this:
> https://support.google.com/accounts/answer/185833
>
> And a video explaining it:
> http://www.youtube.com/watch?v=zMabEyrtPRg&t=2m13s
>
> It is possible to implement this independently of Horde (eg: for  
> email it could be done in the imap server), but we need support for  
> SyncML and Activesync, and also a Horde module for the password  
> management.

How would this work? ActiveSync needs authenticated access to Horde  
and the applications (not to mention access to the IMAP server through  
IMP). Using a different password for each application, or even just  
for ActiveSync access would prevent authentication to at least some of  
the data that is needed.