3 ms·
Before this new wave of SMS trash, we just had TOTP codes SMS 2FA predates cell phones. First SMS 2FA was AT&T in 1996 using pagers. The first draft of the RF
by rgbrenner 3y ago
Before this new wave of SMS trash, we just had TOTP codes
SMS 2FA predates cell phones. First SMS 2FA was AT&T in 1996 using pagers.
The first draft of the RFC for TOTP was written in 2008. Google Authenticator came out in 2010.
- minitech 3y agoAnd TOTP predates “this new wave of SMS trash”, when every service actually started using it.
- deleted 3y ago[deleted]
- burnerthrow008 3y agoEh, that’s a bit pedantic. I knew someone who worked for a bank in the late 80’s - early 90’s, and I distinctly remember them having a little keychain dongle that generated one-time codes every (30? 60?) seconds for secure remote login. The product may have been an RSA SecurID, or something else. Branding aside, it’s the same concept as modern TOTP. The main novelty of the TOTP RFC was standardizing the setup / secret sharing process and algo.