4 ms·
You auth machines you use regularly so that login is 30 seconds once. That's not such a high penalty so that devices you've physically used are authorized and
by wrsh07 10y ago
You auth machines you use regularly so that login is 30 seconds once.
That's not such a high penalty so that devices you've physically used are authorized and all others aren't.
- nommm-nommm 10y agoI browse with tin foil hat settings so I authenticate multiple times a day.
- heartbreak 10y agoThen you wouldn't complain about an extra few seconds for 2FA.
- nommm-nommm 10y agoI do. I don't turn on 2FA because it's a pain in the ass. I want to like it but the extra annoyance isn't compelling enough for me.
- deleted 10y ago[deleted]
- wrsh07 10y agoIn that case, you might be better off investing in an OTP device? [1] It's hard to make a strong recommendation without knowing where on the scale of 1 to RMS you are... [1] https://www.technologyreview.com/s/531926/a-physical-key-to-your-google-account/ https://www.technologyreview.com/s/531926/a-physical-key-to-...
- nommm-nommm 10y agoThis does sound perfect to me. However I worry about losing a token without a established way to replace it. For me I don't like staying logged into most services, I find it very uncomfortable that my computer "remembers" me for some reason. I use a browser plugin to delete cookies on tab close and don't save any history. I'm not so much RMS, just like my browser to "start fresh" most of the time. I also use a VPN 90% of the time. So I value quick login more than account security, I guess.