notes/remove_securex_tg_login_button.org

This commit is contained in:
Yann Esposito (Yogsototh) 2022-02-02 14:48:20 +01:00
parent 982891b617
commit 69ef94b35d
Signed by untrusted user who does not match committer: yogsototh
GPG key ID: 7B19A4C650D59646

View file

@ -104,7 +104,7 @@ So to resume
1. Yes, we could take care of linking the TG account to SXSO account inside
SecureX.
Pros:
- will be perfectly secure (no risk of )
- will be perfectly secure (no risk of linking the wrong account)
- no work to be done on TG side
Cons:
- probably lot of work on SecureX side (both backend and frontend) as a
@ -113,3 +113,10 @@ So to resume
- we still need to propose a login via TG for a long period of time
- we will probably force an ultimatum on customer that might open many
TAC cases.
2. We could try to use the email (even if they are not verified by TG)
Pros:
- Limited work to be done on SecureX side
- no work to be done on TG side
Cons:
- open some security concern that will need to be evaluated
- UX should be evaluated, we don't want end user to be even more confused.