3 ms·
I used to agree, but those attacks are pretty easy to do and have been reported on this site many times. Whereas the other solutions described in the post don't
by jkaplowitz 9y ago
I used to agree, but those attacks are pretty easy to do and have been reported on this site many times. Whereas the other solutions described in the post don't have that attack vector.
- Twisell 9y agoWell it however come with a big con, you become dependent of a third party implementation with dependencies and specifics rules whereas sms is amongst the most used and understood communication standard. This blog post publicise Microsoft implementation but it’s the same problematic for every possible GAFAM specific solution. Apple approach to include a secure and synced password manager in all their product is far more standard friendly approach imho.
- jkaplowitz 9y agoTOTP codes like Google's and Microsoft's apps can use, as well as the U2F security keys, are standardized with multiple implementations in existence. No lock-in with those solutions.