Allow to config "Indicate if 2FA usage is possible" separate from "download tfa.json"

[c33s]

Summary

the feature Indicate if 2FA usage is possible is a cool thing but a password manager which connects to the internet ist an absolute no-go for me.

please separate the download function of tfa.json (which produces the error popup) from the Indicate if 2FA usage is possible and provide the location where this file has to be.

this would allow to use this feature but keep up high security standards by manually downloading the tfa.json file via browser, cronjob, curl, wget, ...

[Rookiestyle]

After the last change of the download location (see #49, 2factorauth/twofactorauth#5238), this can already be configured in the KeePass config file.
There is no UI for that and I don't plan to add one.

To use a local version of the file, you can add the item KeePassOTP.TFASiteCheckURL to KeePass.config.xml like this

<Configuration>
  <Custom>
    ...
    <Item>
      <Key>KeePassOTP.TFASiteCheckURL</Key>
      <Value>C:\Users\rookie\Documents\tfa.json</Value>
    </Item>
  </Custom>
</Configuration>

Out of curiosity:
What will be the difference in having the plugin download the file or downloading it by other means?
I assume you also disabled the automated update check of KeePass and don't use any other plugin (sync, ...) that connects to the internet?

[c33s]

thank you very much, with the added config value it works like charm.

What will be the difference in having the plugin download the file or downloading it by other means?

it's a firewall/security thing. the password manager is blocked by the firewall to access the internet. so it is not that easy for a plugin to leak information to any website.
other programs which have internet access are sandboxed and have no permission to access certain file locations.

I assume you also disabled the automated update check of KeePass and don't use any other plugin (sync, ...) that connects to the internet?

yes everything disabled. no internet for password manager at all :)
sync is again done by other tools as keepass also has the ability to sync with a other local file.