4 ms·
Email is the primary medium for lost password recovery. If someone else gets access to her email account, they have access to most of her other accounts as well
by 16s 16y ago
Email is the primary medium for lost password recovery. If someone else gets access to her email account, they have access to most of her other accounts as well. If she understood this, she would show more concern for two factor authentication.
- Lost_BiomedE 16y agoSorry, a bit off-topic, but is using https enough or is two factor preferable. I use two factor in LastPass but only https log on in gmail.
- jonburs 16y agoIt depends on the attack vector you're trying to protect against. If you're on a machine you control (e.g., a personal laptop) and can vouch for its security -- that is, you're sure there's no kind of spyware installed -- https should be sufficient protection when connecting on public networks (especially open wireless connections). Two-factor auth, on the other hand, protects you when you can't guarantee the security of the machine you're using -- someone able to capture the logon sequence won't be able to replay it at a later point in time. Note that two-factor auth without https isn't clearly of huge benefit, as an attacker with access to your network may be able to capture the session token (e.g., through firesheep or similar tools).
- Lost_BiomedE 16y agoThank You, that clears it up for me. I don't think I am able to upvote you, or haven't figured it out. Maybe someone else will, for your kindness and time.