4 ms·
> If you are using a vault properly That's the main sticking point for a lot of big companies. There are loads of authenticator apps able to store TOTP secrets
by pseudo0 3y ago
> If you are using a vault properly
That's the main sticking point for a lot of big companies. There are loads of authenticator apps able to store TOTP secrets, and it's opaque to them whether the user is using a secure implementation, handling their TOTP secret safely, etc. While with a push notification they have complete control over that process.
- JohnFen 3y agoIn the end, how secure a user is being isn't really their business. How much paternalism from these companies is too much? I am really happy that I don't use these companies services personally, so I don't have to be subjected to their whims. My employer does, but that's their choice.