4 ms·
It's fine that there are flaws with using SMS, but the alternatives -- proprietary apps, proprietary dongles -- aren't any better. They also just create more pa
by Glyptodon 10y ago
It's fine that there are flaws with using SMS, but the alternatives -- proprietary apps, proprietary dongles -- aren't any better. They also just create more parties you have to trust.
And if it comes down to using public/private keys, there's no reason an open source SMS app couldn't authenticate encrypted text messages or something.
If SMS in the clear is bad (and it probably is), then whatever is okay needs to be broadly accessible, open, and usable.
- WorldMaker 10y ago«It's fine that there are flaws with using SMS, but the alternatives -- proprietary apps, proprietary dongles -- aren't any better. They also just create more parties you have to trust.» TOTP and HOTP are both open OATH moderated standards. You can use any app or dongle of your choice with any provider that follows the standards. This is a way better alternative than SMS.