4 ms·

I have edited my answer. Most institutions I know have chosen SMS for Strong Customer Authentication which means sooner or later you in practical life will nee

by chewz 7y ago

I have edited my answer. Most institutions I know have chosen SMS for Strong Customer Authentication which means sooner or later you in practical life will need your personal SIM card (banking, doctor visit, e-prescription, e-government etc.). Unless you chose to live off the grid for real.

dangus 7y ago
But also, I think you have that situation understood the other way around. SMS was chosen because everyone has it already. So it's not a matter of being forced to have it, it's a matter of "all other alternatives are less widespread." I think there are actually more people globally with access to mobile phones than people who have access to basic sanitation, i.e. flushing toilets. I'm sure that many or most of those organizations have alternative, non-electronic means of interaction - such as phone, paper (writing checks), or in-person. That is the alternative to using a SIM card.
- chewz 7y ago
  Yes but situation before September was that I could use my account without SIM card. Now access to my account requires having a SIM card and a phone. Now imagine taking all my six SIM cards on vacation to Thailand just because you may be in need to urgently use one of my multiple bank or brokerage accounts ;-)
  - ddalex 7y ago
    So you're complaining of having to use a SIM while you have 6 SIMs?
    - chewz 7y ago
      I am not yet ready to become a hermit. But when I do I would rather live without a phone then without phone and a bank account. :-)
thefounder 7y ago
sms is not PSD2 compliant which means it can't be used as SCA method https://www.zdnet.com/article/german-banks-are-moving-away-from-sms-one-time-passcodes/ https://www.zdnet.com/article/german-banks-are-moving-away-f...
- fulafel 7y ago
  This article summarizes a document that's titled "opinion". As long as there is no definite legal outlawing of SMS, many banks will continue to use it.
  - thefounder 7y ago
    Well the document provided is an opinion on the implementation and further clarifies the specifications. It clears states that SMS is not PSD2 compliant. Banks found in breach will be forced to comply. I think is more a banking license issue than a "legality" issue. >> To fulfil its statutory objective of contributing to supervisory convergence in the EU/European Economic Area (EEA), and to do so in the specific context of the RTS, the EBA is issuing a further opinion with a view to responding to the large number of queries that the EBA and national competent authorities (CAs) have received from market participants on SCA and, in particular, on what procedure or combination of authentication elements may or may not constitute SCA

by chewz 7y ago

dangus 7y ago

But also, I think you have that situation understood the other way around. SMS was chosen because everyone has it already. So it's not a matter of being forced to have it, it's a matter of "all other alternatives are less widespread." I think there are actually more people globally with access to mobile phones than people who have access to basic sanitation, i.e. flushing toilets. I'm sure that many or most of those organizations have alternative, non-electronic means of interaction - such as phone, paper (writing checks), or in-person. That is the alternative to using a SIM card.

chewz 7y ago
Yes but situation before September was that I could use my account without SIM card. Now access to my account requires having a SIM card and a phone. Now imagine taking all my six SIM cards on vacation to Thailand just because you may be in need to urgently use one of my multiple bank or brokerage accounts ;-)
- ddalex 7y ago
  So you're complaining of having to use a SIM while you have 6 SIMs?
  - chewz 7y ago
    I am not yet ready to become a hermit. But when I do I would rather live without a phone then without phone and a bank account. :-)

thefounder 7y ago

sms is not PSD2 compliant which means it can't be used as SCA method https://www.zdnet.com/article/german-banks-are-moving-away-from-sms-one-time-passcodes/ https://www.zdnet.com/article/german-banks-are-moving-away-f...

fulafel 7y ago
This article summarizes a document that's titled "opinion". As long as there is no definite legal outlawing of SMS, many banks will continue to use it.
- thefounder 7y ago
  Well the document provided is an opinion on the implementation and further clarifies the specifications. It clears states that SMS is not PSD2 compliant. Banks found in breach will be forced to comply. I think is more a banking license issue than a "legality" issue. >> To fulfil its statutory objective of contributing to supervisory convergence in the EU/European Economic Area (EEA), and to do so in the specific context of the RTS, the EBA is issuing a further opinion with a view to responding to the large number of queries that the EBA and national competent authorities (CAs) have received from market participants on SCA and, in particular, on what procedure or combination of authentication elements may or may not constitute SCA