Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Help diambiguating duplicate entries caused by registration timeouts #1606

Open
sjvudp opened this issue Jan 31, 2025 · 0 comments
Open

Help diambiguating duplicate entries caused by registration timeouts #1606

sjvudp opened this issue Jan 31, 2025 · 0 comments
Labels
proposal A proposal for a new feature

Comments

@sjvudp
Copy link

sjvudp commented Jan 31, 2025

Some sites have a rather short timeout when registering the TOTP 2FA, and when restarting that process, a new secret is generated.
This leads to problems like this:

  • You start the TOTP 2FA registration process on (say) evil.com.
  • You scan the QR code with Aegis, adding a TOTP entry for evil.com
  • You want to write down (or type it on your desktop PC) the secret code shown in Aegis (which takes some time)
  • When you are done (and safe), you want to enter the 2FA response to evil.com
  • However the registration procedure has timed out (and your entry in Aegis is now an orphan)

So you decide to do it again, trying to be faster. However when scanning the QR code, another entry for evil.com is being created (with a different secret), and it's hard to tell "who's who" (other than trying each response) viewing the list.

So I suggest this enhancement:

  • If a QR code results in an entry whose name exists already, don't silently add another one, BUT
  • ask whether the existing entry with the same name should be updated with the new secret (also giving a warning about the consequences)
  • OR whether to create a new entry with a different name (either adding a suffix like "# 2" automatically, or letting the user edit the name)
@sjvudp sjvudp added the proposal A proposal for a new feature label Jan 31, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
proposal A proposal for a new feature
Projects
None yet
Development

No branches or pull requests

1 participant