Allow for PIN login with aggressive lock-out (thanks gurnec)

This commit is contained in:
Saivann 2014-12-11 13:11:36 -05:00
parent bc778b8f64
commit b81cd7dd06

View file

@ -270,8 +270,8 @@ Basic requirements:
- Website supports HTTPS and 301 redirects HTTP requests - Website supports HTTPS and 301 redirects HTTP requests
- SSL certificate passes [Qualys SSL Labs SSL test](https://www.ssllabs.com/ssltest/) - SSL certificate passes [Qualys SSL Labs SSL test](https://www.ssllabs.com/ssltest/)
- The identity of CEOs and/or developers is public - The identity of CEOs and/or developers is public
- If private keys are stored online: - If private keys or encryption keys are stored online:
- Refuses weak passwords (short passwords and/or common passwords) - Refuses weak passwords (short passwords and/or common passwords) used to secure access to any funds, or provides an aggressive account lock-out feature in response to failed login attempts along with a strict account recovery process.
- If user has no access over its private keys: - If user has no access over its private keys:
- Provides 2FA authentication feature - Provides 2FA authentication feature
- Reminds the user to enable 2FA by email or in the main UI of the wallet - Reminds the user to enable 2FA by email or in the main UI of the wallet