2 ms·
The never allowing multiple tokens things drives me nuts.
by cbsmith 5y ago
The never allowing multiple tokens things drives me nuts.
- tialaramex 5y agoPeople do bring this up on HN a lot. For WebAuthn / U2F the only actual example anybody has is AWS. So that's not an industry problem that's specifically an AWS problem. Unless you have an actual example which isn't AWS? As to TOTP it's a shared secret, so just clone it. If they allow you to set multiple secrets it would just reduce your overall security because more random guesses work. Also, get WebAuthn instead.
- cbsmith 5y agoTry setting up multiple WebAuthn w/Facebook, and then disabling the phone based back door.