Hi,
In my personal opinion,
-
Make 2FA mandatory for ALL users or include the option to make it mandatory at level of LIR account
-
Include the feature (for Admin role) to check if users have 2FA enabled, for example, in the user list.
-
It would be interesting to have the option of receiving confirmation by email when a user accesses the portal.
-
Option to set that an email could be sent to Administrators or specific email account when someone accesses.
-
To add administrators or delete users, it asks you for an additional 2FA.
-
Include a new "None" role to be able to temporarily disable users without the need to delete them.
-
Include detection of suspicious accesses: accesses from anonymization IPs, from different devices, etc.
Regards.
Rodolfo.
De: ripe-list <ripe-list-bounces@ripe.net> En nombre de
Michele Neylon - Blacknight via ripe-list
Enviado el: jueves, 4 de enero de 2024 0:33
Para: Randy Bush <randy@psg.com>
CC: RIPE List <ripe-list@ripe.net>
Asunto: Re: [ripe-list] account breaking leads to routing mess
See also
|
|
|
|
|
2FA should be mandatory or access without it should have lower privileges
I’d hope the bit about password complexity in the article above is incorrect!
Regards
Michele
Mr Michele Neylon
Blacknight Hosting & Domains
@mneylon
Sent from mobile so typos and brevity are normal
On 3 Jan 2024, at 21:25, Randy Bush <randy@psg.com> wrote:
[EXTERNAL EMAIL] Please use caution when opening attachments from unrecognised sources.
https://benjojo.co.uk/u/benjojo/h/r1zj333N4L6cF7P1xv
i would be interested in what lessons are learned about protecting one's
rir accounts
randy
--
To unsubscribe from this mailing list, get a password reminder, or change your subscription options, please visit: https://lists.ripe.net/mailman/listinfo/ripe-list