4 ms·
SMS is an awful point of failure to inject into a protocol. It is plain-text, monitored in many countries, and can be unreliable and expensive in emerging mark
by ygjb 11y ago
SMS is an awful point of failure to inject into a protocol. It is plain-text, monitored in many countries, and can be unreliable and expensive in emerging markets, and just no.
"But users will forget/loose their reset number!" Maybe, maybe not. It's a cultural thing.
Really? Can you cite anything here that indicates this is the case?
Users treat email access differently, seeing as how it's bound to user identity, usually across dozens, if not hundreds of services.
- tim333 11y agoSMS though provides a higher level of security. Some hacker anywhere on the planet could have accessed my email and passwords but they can't get a code sent to my phone unless they are nearby and have got hold of the phone. I'm not sure it being plain text and monitored matters much as all that's bring sent is a random number usually. I'll admit it could cost more and so may not be the thing for sites with lots of free users. If you can't get sms some sites will phone you with a recorded message.