{"action":"opened","issue":{"url":"https://api.github.com/repos/owncloud/android/issues/1189","labels_url":"https://api.github.com/repos/owncloud/android/issues/1189/labels{/name}","comments_url":"https://api.github.com/repos/owncloud/android/issues/1189/comments","events_url":"https://api.github.com/repos/owncloud/android/issues/1189/events","html_url":"https://github.com/owncloud/android/issues/1189","id":109824074,"number":1189,"title":"Security","user":{"login":"JasperWeiss","id":13945666,"avatar_url":"https://avatars.githubusercontent.com/u/13945666?v=3","gravatar_id":"","url":"https://api.github.com/users/JasperWeiss","html_url":"https://github.com/JasperWeiss","followers_url":"https://api.github.com/users/JasperWeiss/followers","following_url":"https://api.github.com/users/JasperWeiss/following{/other_user}","gists_url":"https://api.github.com/users/JasperWeiss/gists{/gist_id}","starred_url":"https://api.github.com/users/JasperWeiss/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/JasperWeiss/subscriptions","organizations_url":"https://api.github.com/users/JasperWeiss/orgs","repos_url":"https://api.github.com/users/JasperWeiss/repos","events_url":"https://api.github.com/users/JasperWeiss/events{/privacy}","received_events_url":"https://api.github.com/users/JasperWeiss/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-10-05T15:35:17Z","updated_at":"2015-10-05T15:35:17Z","closed_at":null,"body":"For security, I think 2FA is a must, TOTP should be sufficient. So that a compromised password isn't too big of an issue.\r\n\r\nAlso, would it be possible for the Android and Desktop clients to check the SSL certificate fingerprint?\r\nBassically, in the settings menu it should have a little information about the SSL certificate including the fingerprint. The app should give a warning when anything changed, that way MIT attacks are nearly impossible."}}