4 ms·
SMS does still help to mitigate a common attack...folks trying out password dumps on other sites. But, I don’t disagree we need to move on when we have more opt
by ptoomey3 8y ago
SMS does still help to mitigate a common attack...folks trying out password dumps on other sites. But, I don’t disagree we need to move on when we have more options to choose from. Right now the best looking option is webauthn with platform authenticators.
- def_true_false 8y agoIf password reuse is a problem, one should be solving that problem instead of it's symptoms. "Have I Been Pwned" comes to mind. https://haveibeenpwned.com/API/v2#PwnedPasswords https://haveibeenpwned.com/API/v2#PwnedPasswords