Post #3926997
2026-07-19 05:11 UTC
@wirepair@mastodon.social Uh, that does not seem in the spirit of 2FA. Then again you can also add additional 2FA devices to admin accounts without additional authentication even when admin mode enforcement is active.
Replies (1)
-
@Epic_Null@infosec.exchange 2026-07-19 16:09
@thepwnicorn@infosec.exchange @wirepair@mastodon.social Why not? If you have an SSH key on a machine, the machine becomes a valid "Something you have" for the purposes of authentication.