3 ms·
Many services now allow password reset by email (magic link), Cierge's approach just does away with the illusion of security employed by such services. Outsourc
by rovek 9y ago
Many services now allow password reset by email (magic link), Cierge's approach just does away with the illusion of security employed by such services. Outsourcing authentication to email, as many services do with Google/Facebook/Github accounts.
The Cierge login approach would obviously be inadvisable for protecting something of importance, like your email account.
- rasengan 9y agoWhen user password are used for security, proper services have additional questions (in other words 2FA) to reset your password by email.
- WorldMaker 9y agoAdditional questions are bonus passwords. They are not 2FA.