-
Adding phishing proof passwordless authentication with #FIDO2/#WebAuthn and #U2F
Hey guys. I am Yuriy. An engineer from FIDO Alliance. You probably heard about us. We are the organisation behind U2F protocol that Google reported killed employee phishing: https://krebsonsecurity.com/2018/07/google-security-keys-neutralized-empl...14 Future consideration
-
transfer droplet ownership
i would like to be able to transfer a droplet as is (completely with IP address and RUNNING) from an account to another. this has nothing to do with droplet properties and it should be a simple change in database (for droplet_id change owner_id fr...32 Future consideration
-
mark a droplet as protected, so deleting it require confirm from owners via email
I noticed that destroying a droplet is so easy on Digital Ocean. I have to double and triple check If I'm deleting a correct droplet or not. I think It's a good idea that I (as a customer) could mark some of my droplets as protected droplets, so ...14 Future consideration
-
Team accounts with fine grain control
Continuing from http://digitalocean.uservoice.com/forums/136585-digitalocean/suggestions/3981054-allow-team-accounts, that is great for multiple developers. However, I would like to set a billing contact from our finance department who is not a d...8 Future consideration
-
Log out users after a couple of minutes
...say, after 15 minutes or so.15 Future consideration
-
Add SAML 2.0 support for SSO
It would be decent if providers such as JumpCloud could be used to log in and manage organisation users in teams. Digital Ocean is a decent product which changed whole industry and it's now a part of enterprise world, so using identity mgmnt and...11 Future consideration
-
Duo Security
i would like to have this supported as an alternative to current 2-factor authentication Duo supports Yubikeys and SMS/Phone confirmation as well LastPass already uses Duo Security as one if its 2-factor methods https://www.duosecurity.com/6 Future consideration
-
support granular OAuth2 scopes
Currently the OAuth2 API only supports the very coarse scopes of "read" or "read write". It'd be great if we could request much more granular scopes. Really, any more granularity would be appreciated. In the ideal, there'd be a way to request OA...5 Future consideration
-
More detailed Security History's Action
It could be very nice if it was possible to see "more detail" on an event in the Security History because "Action" is useful but often not enough :)2 Future consideration
-
Secondary email in the account
Not necessarily required for login, login email can be a a primary email. However, if the system allows to add few secondary emails (atleast one), and if the alerts received by primary email are received by secondary email too, it will be a very h...2 Future consideration