5 ms·

Sure. But the message I get is, "Now I can use Google's phishing resistant 2FA device to protect my Google Cloud account". It's like accessing Gmail via Chrome:

by krn 8y ago

Sure. But the message I get is, "Now I can use Google's phishing resistant 2FA device to protect my Google Cloud account". It's like accessing Gmail via Chrome: you know, that it's the "official way".

tptacek 8y ago
It's a U2F token. It should be the official way. It's kind of a travesty if AWS doesn't have native support for it.
- pvg 8y ago
  Fairly sure it doesn't unless it's really well hidden. In fact, if someone at Google really did happen to think 'doing initial rollout to GCP customers is going to make AWS look lame' and AWS stops dragging their feet on this, it would also be a good thing for everyone.
  - krn 8y ago
    I would argue, that the entire GCP development model, as the late entrant's to the cloud market, is about making AWS look lame in comparison.
jrnichols 8y ago
or are you saying "Hey, what a handy way to keep people invested in our Googleverse?"
- tptacek 8y ago
  How do U2F tokens accomplish that? It's an open standard; it is basically the open standard for modern multi-factor authentication.
  - jrnichols 8y ago
    I did not realize they were using an open standard.