3 ms·
The Canadian Revenue Agency started forcing SMS 2FA on online accounts recently
by newsclues 5y ago
The Canadian Revenue Agency started forcing SMS 2FA on online accounts recently
- GekkePrutser 5y agoPayPal in Europe is doing SMS now too. They claim it's for "PSD2" compliance or something. But I already had TOTP 2FA ("Google Authenticator") enabled and I'd prefer to use that instead as it's much safer than SMS. That was never intended to carry secure information. Also, TOTP works even when I have my phone in airplane mode. Strange thing is it seems to randomly ask for SMS or TOTP now, whichever it feels like at the time. Still it's weird that an official standard mandates SMS 2FA when more secure methods are available.
- atatatat 5y agoIt's not weird at all in the context of metadata (phone #).