4 ms·
I'd add: - 2-factor auth support - federated login support (i.e. login with Google/Facebook/etc buttons) - some sort of indication of encryption in-flight an
by mattlondon 7y ago
I'd add:
- 2-factor auth support
- federated login support (i.e. login with Google/Facebook/etc buttons)
- some sort of indication of encryption in-flight and at-rest, and who handles the keys (e.g. is there a per-user key that tech support can't even access without user grant, or is there a single hard-codes AES key in the APK etc that everyone knows)
- fmajid 7y agoMost MCUs don't have a persistent real-time clock and thus if power is lost, there is a good chance TOTP based 2FA will no longer work.
- rkangel 7y agoThe 3rd one makes sense, the first two are system questions rather than device questions. In an open system there may be multiple service providers who's security should be judged separately from the security of a device.