Q1. What is the problem that you are trying to solve?
I have a strong password for my user account and re-typing it for every password retrieval is cumbersome. Hence, I tend to extend my session time to improve user experience but on at same time I scarify security.
If I could setup a yubikey which I can use to confirm my pesonal presence during copying secrets I would be fine to extend my session until the browser is closed. This would improve both for me, security and user experience.
Q2 - Who is impacted?
None as this would be an opt-in option (i.e. it shouldn’t be coupled to the 2FA for login).
Make sure that one can setup an alternative 2FA as backup (as for login but again not coupled).
This feature is not orthogonal to the 2FA for login. I would provide the option to use the same 2FA mechanism for both Login and User Presence but would as well support to use different keys/2FA per option (i.e. this way one could for instance setup a key which requires a PIN for login but only a touch for user presence)
Q3 - Why is it important and/or urgent?
Security is key for Passbolt, providing better UX matters a lot when it comes to users actually using the security features
Q4 - What is your proposed solution? (optional)
See above
Q5. Community support
I am not allowed to create polls, so please some admin create one