4 ms·
It always wondered me why my bank can't offer my 2FA with SMS code, but Steam or Github can?
by akerro 10y ago
It always wondered me why my bank can't offer my 2FA with SMS code, but Steam or Github can?
- peterwwillis 10y agoWhy do you want the place that keeps all your money to support an unencrypted, unauthenticated, over-the-air token delivered by an insecure provider over an insecure protocol?
- akerro 10y agoBecause is still better than login + password?
- ocdtrekkie 10y agoBanks have rules and regulations to adhere to. You'll notice almost all banks have universally the same additional types of security (like the security image/security phrase) and such. Because those fit within the industry standards.
- peterwwillis 10y agoUsually they have an Identity & Access Management solution in place to authenticate users. It does more than just the security image & secret phrase. It also uses hundreds of unique identifiers about your browser & OS to rank if you are the same user that usually logs in. If it's too low they can take additional actions like ask you additional challenge questions, flag your account for review, or lock your account.