3 ms·
If only that was more broadly supported.
by bombolo 4y ago
If only that was more broadly supported.
- fullstop 4y agoWhere is it missing support? edit: I want to reiterate that these are still TOTP codes and not WebAuth/FIDO2.
- bombolo 4y agoOh I thought you meant those usb devices that need to be set up, like google titan and similar.
- fullstop 4y agoAh, no, these can connect to a PC over USB and to a smart phone over USB or NFC to generate a 6 digit TOTP code, just like Google Authenticator does. They can also do more sophisticated things, but that's not what I was referring to here. Those sophisticated and more secure things are supported by Google, Facebook, Dropbox, Github, etc, but not by most banks. Banks are so slow with this stuff and still do SMS-based 2FA which is absurd to me.
- jve 4y agoYesterday was trying to pay with PayPal (protected by hardware key/yubikey) via Android and it said: Supported on desktop only... And another thing: https://www.paypal-community.com/t5/Managing-Account/Why-am-I-only-allowed-to-create-one-security-device-for-2-factor/td-p/2920679 https://www.paypal-community.com/t5/Managing-Account/Why-am-...
- fullstop 4y agoRight, this still has to do with WebAuthn/FIDO2. PayPal can not tell if I am using Google Authenticator or if I am using Yubikey TOTP. I would absolutely love if more services supported WebAuthn/FIDO2, of course, but Yubikey TOTP is supported everywhere Google Authenticator is.