> That's like saying MD5 is fine for hashing passwords, because it's better than plaintext. No, I'm saying we need to come down to planet earth and recognise

> That's like saying MD5 is fine for hashing passwords, because it's better than plaintext. No, I'm saying we need to come down to planet earth and recognise we live in the real world. Hence SMS or TOTP is preferable to nothing at all. Its a bit like the hardcore open-source types who can't see the wood from the trees and cannot fathom why anyone would possibly want to use anything else other than Linux and fully open-source alternatives to Microsoft Office or Photoshop. Sometimes you have to compromise.