Thanks for the tips, we've implemented some of those here. I'd like to put CSP in NodeBB core itself, so that's a separate issue...
Multifactor Authentication e.g. Authy, Google Authenticator
I know this could be a plugin, but i think having it integrated and have the option to enable it would be sweet.
Admins could decide whether only certain groups or everyone has access to use it.
I think this would also increase the security of NodeBB as a whole
Nice to have.
Shard last edited by
On my to-do list. But it's down there a ways.