3 ms·
Why do you despise it?
by danielvaughn 3y ago
Why do you despise it?
- ceejayoz 3y agoMy password manager is faster and easier (and the email flows tend to make that slower, hidden behind a "login with another method" small grey link), email often has deliverability delays, and it's insecure to boot.
- miketmahlkow 3y agoI can second that. I prefer password logins over magic links via email. It adds too much friction. I can understand that it might be easier for people who are not using a password manager. For most services I prefer a combination of password and authy-based 2FA. For very specific purposes, some kind of hardware-based authentication, for example with yubikeys makes sense.
- jsunderland323 3y agoMagic links are great because they essentially eliminate ATO attacks and allow startups to bypass SAML requirements by delegating to the mail provider. I’m 100% willing to forgo efficiency gains of passwords and managers as both a user and developer.
- rkagerer 3y agoAll you're doing is punting your security to my email provider. It's annoying how many companies assume I have absolute trust in my ISP/Google/Miscrosoft/IT.
- ceejayoz 3y ago> essentially eliminate ATO attacks They kinda increase the blast radius of an ATO attack on your email account, though.
- jasfi 3y agoReplying too late, most likely. But with access to your email account someone could reset your password to what they want it to be and gain access.