Can't agree more! For 2FA there are much better options, like TOTPs which are more secure against phishing and account takeover (because they don't allow outsid

Can't agree more! For 2FA there are much better options, like TOTPs which are more secure against phishing and account takeover (because they don't allow outside parties to trigger a verification request on your device). Let's see how the Bluetooth-based web auth proposal turns out to be implemented by big tech.