4 ms·

Sorry, their official MFA policy was "just go find a random one"? How would that even work? Do they have a contract with every MFA service?

• ThePowerOfFuet 4y ago
  > Sorry, their official MFA policy was "just go find a random one"? How would that even work? Do they have a contract with every MFA service? TOTP is a standard, so anyone can implement it. https://www.rfc-editor.org/rfc/rfc6238 https://www.rfc-editor.org/rfc/rfc6238
• nthn_g 4y ago
  I would presume a random TOTP app. Incredibly stupid policy nonetheless.
• technion 4y ago
  Yes that was the official policy. I was in such disbelief I made her show me the official guide she was given. Of course im sure they had no contracts anywhere, it looked like someone simply said "google will sell your data" and someone senior bought it and banned one app.
• cesarb 4y ago
  > How would that even work? TOTP is a standard (https://www.rfc-editor.org/rfc/rfc6238 https://www.rfc-editor.org/rfc/rfc6238), so I don't see how that wouldn't work.
  • wyldfire 4y ago
    It wouldn't work if the app implementing TOTP decided to share the seeds you stored in it.
  • DocTomoe 4y ago
    Let's just assume that not ALL government agencies employ rocket scientists.