3 ms·
TOTP is an improvement over SMS in that identity is not tied to a phone number, which has been proven over and over again to be a terrible indicator of identity
by staticassertion 5y ago
TOTP is an improvement over SMS in that identity is not tied to a phone number, which has been proven over and over again to be a terrible indicator of identity.
- UncleMeat 5y agoThat isn't a meaningful distinction. Both cases involve you typing in a number into a web form.
- staticassertion 5y agoIt was a meaningful distinction to the OP... While TOTP contains a bypass (phishing) SMS contains an additional vulnerability.