3 ms·
Yes. 2-factor authentication does not address site impersonation. This is for the more common case of trying to access a user's account without the user's dire
by kbutler 16y ago
Yes. 2-factor authentication does not address site impersonation.
This is for the more common case of trying to access a user's account without the user's direct involvement. (e.g., if I grabbed lists of common passwords, try to use your password from a cracked site to access an account on google, etc.).
Classify this as "step forward" not "silver bullet".
kb
- nbpoole 16y agoExcept they specifically list anti-phishing as one of the use-cases: "if you reuse the same password on multiple sites and one of those sites gets hacked, or your password is conned out of you directly through a phishing scam, it can be used to access some of your most closely-held information." You're right that it helps in cases where all the attacker has is your username and password. However, the blog post overstates the merits of this feature a little bit. ;)