2 ms·

So if there are certain vulnerable categories of people who cannot use any form of 2FA, where does that leave 2FA? Seems to me it should mean that it has to be

So if there are certain vulnerable categories of people who cannot use any form of 2FA, where does that leave 2FA? Seems to me it should mean that it has to be optional, at least until we solve that problem.

Kalium 4y ago
That depends greatly on if the systems in question are expected to provide universal service or not. This is perhaps the crux of the question - do we expect Google to operate as a public service capable of delivering service in a way that meets the needs of 100% of the population? Or do we think it's acceptable for Google to decide that they're happy with 98%, modulo things like the ADA? USPS serves every US address. Lone Star Overnight is allowed to mostly serve Texas without a requirement to also serve Maine. Which category do we want Google to fall into? This kinda smells like we're expecting it to be a universally provisioned public service, but provided by a private entity with private funding.