4 ms·
You can use 2FA with static password authentication. Remember the “password” here only means “character string”, it can easily carry an OTP.
by trasz 4y ago
You can use 2FA with static password authentication. Remember the “password” here only means “character string”, it can easily carry an OTP.
- magicalhippo 4y agoRight, just as with XOAUTH2, the "password" sent to the server is actually the (encoded) OAuth token.
- trasz 4y agoSo what does it improve then, that would justify the incompatibility and added technological debt (dependencies)?
- magicalhippo 4y agoWell the question I responded to was "What does oauth have to tho with authentication". I fully agree with the move away from plain passwords in this case, given that it's no longer "just" the password to a mail account, but to much, much more. Now while I think OAuth adds some features that can be useful in certain settings, I'll be inclined to agree that requiring OAuth isn't the best move. However the alternatives would probably require a lot of extra work on Microsoft's behalf, like being able to set up device-specific passwords or similar. So, given the need to move away from plain account passwords, I can understand why they wouldn't want to do that and just use what they already had.