4 ms·
> Turns out that phone numbers, whilst also subject to flux, have better long-term congruence to identity I'm not sure this is actually true, at least in the l
by 43920 8y ago
> Turns out that phone numbers, whilst also subject to flux, have better long-term congruence to identity
I'm not sure this is actually true, at least in the long-term. Most people keep their phone number for a long time, but if they ever cancel their phone service, the number usually gets recycled and given to someone else (unlike an email, which almost never gets re-used). If you're storing any kind of sensitive data, and allowing people to access it as long as they can verify their phone number, it could end up being a pretty serious privacy risk. It could also stop people from signing up for your service - if I get a new phone number, and the previous owner of the number has already signed up, what am I supposed to do?
- inopinatus 8y agoThat's an interesting nuance and is the reason we can't/don't use phone number as the primary identity, and must be wary of it for account recovery, but we can and do safely use it (in conjunction with other factors) for duplicate account detection.