OWASP weekend for @shipnixio seems to be a success!
✅ Push MFA to production ✅ Send security event email to users when MFA is disabled, enabled and when a backup code has been used to log in ✅ Shorter lived login session to comply with OWASP recommendations
✅ A little touch-up on the public roadmap I made for @shipnixio a while a ago, and start to use it to display what features I am working on ✅ Develop TOTP with Crypto.OTP, but have not implemented it in the web app yet
✅ Get mentioned on @HaskelInterlude podcast 😍 ✅ Add logo and adjust color scheme ✅ Give the landing page some love ✅ Write a public security policy because I think it will be important for trust by high value customers
✅ Get logo from Fiverr logo maker. Not 100% sure yet, but think I like it ✅ Fix bugs in migration flow, solved by deleting more code than I added 👌 ✅ Let users review and modify environment variables before migration