Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Hide the secret behind a password field #105

Open
rpc31 opened this issue Apr 1, 2023 · 0 comments
Open

Hide the secret behind a password field #105

rpc31 opened this issue Apr 1, 2023 · 0 comments

Comments

@rpc31
Copy link

rpc31 commented Apr 1, 2023

first, thank you for this implementation of SSSS, which is one of the nicest and most accessible I've seen on the web.

Here the use case : We're 3 people sharing a common space, and we installed cameras. Our camera system only allows 1 admin (email + password, no 2FA). We do NOT want anybody accessing the recordings unless someone reports something being stolen.
We want to create an admin password so that each member only knows parts of it, and never the full password. Person 1 will have the 4 first characters, person 2 the next 4, and person 3 the last four characters. The email will be a gaggle email that will send all emails to us, also secured by this password. Thus preventing a stealth "forgot password" method.

When an item is reported as stolen, every member regroups and they, each after one other, enter their string into the Camera app an can resolve the issue together.
Now, if one member IS the robber, then they will not disclose their part, by faking it's correct when it's not.

Your implementation of SSSS is good for that, but it needs some options for this kind of use case. As each member "ENTERS" its own strings one after another, the next member to add its series of trings should NOT see the firsts parts of the secret.

So I guess :

1 . Would it be possible to add a button/switch next to the SECRET field to hide its content (and, for example, lock/grey the switch button it for 1 minute so no one can intervene?)
2. A way/option to display the QR codes 1 by 1, so each member can, 1 after the other, take a picture of the one for them, without the need of a printer.

I don't know if everything makes sense here.

thank you for your implementation and your software.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant