4 ms·
He said “(ONLY!) use SMS-based 2FA”. Some of those sites support webauthn. TOTP is secure enough for the rest. SMS 2FA is only a problem when it’s the only opt
by NavinF 4y ago
He said “(ONLY!) use SMS-based 2FA”.
Some of those sites support webauthn. TOTP is secure enough for the rest. SMS 2FA is only a problem when it’s the only option.
- throwaway290 4y agoWhy does offering an insecure authentication method stop being a problem when there are alternatives? It should not be offered.