2 ms·
> GitLab doesn't support SMS-based 2FA – the most commonly hijacked implementation – only supporting app-based 2FA or that issued via a WebAuthn device, which a
by declan_roberts 3y ago
> GitLab doesn't support SMS-based 2FA – the most commonly hijacked implementation – only supporting app-based 2FA or that issued via a WebAuthn device, which are much more secure.
I’m glad the register is calling this out. I hate handing over my personal phone number to a website for my “security”. Yeah right security, and not for your anti-spam and tracking purposes.
App-based 2FA is much better, especially passkeys.