Does anyone know if Zimbra will support U2F or better yet FIDO 2 from the Fido alliance as one of the second factors at some point? I have a co-op student building us cheap u2f tokens for approx $4 each based on the u2fzero project and we are close to finished on the hardware side for her project. I still need to modify the code for some features we require and started to look into zimbra and what it would take. Anyone have anything to add on the difficulty of adding additional 2nd factors?... I saw the /opt/zimbra/docs/twofactorauth.md which is my starting point. Just curious if there is even a desire for this from the community???
For those that don't know, most browsers with the exception of safar now have native U2F support. The U2Fzero project uses a hardware secure enclave (ATECC508A) and is fairly immune to attacks even on machines with keyloggers and other malware installed.
Ref: ATECC508A and http://ww1.microchip.com/downloads/en/DeviceDoc/20005927A.pdf
- Zimbra Collaboration 8.6 Patch 9 now available (includes fix for CVE-2017-8802). Read the announcement.
- Zimbra Collaboration 8.8.7 + Zimbra Connector for Outlook 8.8.7 are available.. Read the announcement.
- Are you a Zimbra Developer? You can find some interesting stuff in our Official GitHub: https://github.com/Zimbra and check the Community Projects too: https://github.com/Zimbra-Community/
Have a great idea for extending Zimbra? Share ideas, ask questions, contribute, and get feedback.
1 post • Page 1 of 1
Who is online
Users browsing this forum: No registered users and 2 guests