4 ms·
2FA, reset your password, making sure that password emails gets through, preventing login enumeration, preventing dictionary attacks, etc. Those are just the t
by ayende 6y ago
2FA, reset your password, making sure that password emails gets through, preventing login enumeration, preventing dictionary attacks, etc.
Those are just the things off the top of my head, it's not just three columns
- kevincox 6y agoRate limiting is also a big one.
- Multicomp 6y agoThat reinforces the point of the article, but is semi-orthogonal to my point. Convenience strikes again. They use the google third party sign in since a big company like dnd can't be bothered to implement 3 columns plus your nice to haves. And they are nice to haves, arguably obvious and easily upgraded to required table stakes, but not _required_ to implement email-based sign in. The first three of your listed iftems are also effectively mitigated with a password manager.