Download backup - email link only

[jomaxro (Joshua Rosenfeld)]

Yes, that is new behavior added to increase the security of the backups. I’m looking for the relevant topic now…

Edit: Here you go:

Security breach in Discourse forum with SSO

Email confirmation of backup downloads is now in, thanks to @blake. You can’t download backups simply by being logged in, you must… Be logged in as an admin → to get to /admin/backups Control the email address of an admin → to receive the download link email So this is indeed a form of two factor auth. Verifies control of the email account, plus the ability to log in as the admin. Here’s the actual email the admin will receive when the download backup button is pressed; it warns about unknow…