3 ms·
I'm still annoyed that one of my banks, only offers 2 factor though email & sms and doesn't offer TOTP. Does anyone know if this is a PCI thing or is it just bu
by skunkworker 7y ago
I'm still annoyed that one of my banks, only offers 2 factor though email & sms and doesn't offer TOTP. Does anyone know if this is a PCI thing or is it just bureaucracy?
- crgwbr 7y agoI’ve spent a good bit of time reading PCI requirements and I can’t think of anything that’d prevent using TOTP or Yubikey type devices. My guess is that they don’t implement it because they don’t think anyone would use it. Honestly I can’t say they’re wrong either—I’d love to use a Yubikey on my bank accounts, but I can’t imagine anyone else in my circle of non-programmer friends/family doing so.
- Rafert 7y agoWith WebAuthn it doesn't have to be a USB fob - it can be built into your device too.