3 ms·
And they try to lock you in to their own ecosystem. If you use sendgrid, it requires an authy specific 2fa code that can only be generated in their app.
by politelemon 3y ago
And they try to lock you in to their own ecosystem. If you use sendgrid, it requires an authy specific 2fa code that can only be generated in their app.
- ing33k 3y agoYeah. I have always wondered what they gain by doing this.
- i386 3y ago“Security”
- gunapologist99 3y agoLock-in by forcing you to use another Twilio product.
- aftbit 3y agoI installed Authy on a rooted phone just to yoink the SendGrid token out and put it in our usual shared authentication service. Such a pain in the ass. I would highly recommend against SendGrid in basically all circumstances fwiw.
- nicoburns 3y ago> I would highly recommend against SendGrid in basically all circumstances fwiw. To add another reason: their API will return an error if you send it more than one simultaneous request.
- mattferderer 3y agoSendgrid was my go to email provider for clients pre-acquisition. Once they got bought out & forced their poorly implemented 2fa with mobile phone requirements, I had no choice but to find different providers.
- djbusby 3y agoPostmark FTW
- tczMUFlmoNk 3y agoYes, and, if you create a SendGrid account and therefore an Authy account, this may immediately enroll other accounts of yours on entirely unrelated websites/services/platforms into Authy, presumably by correlating your phone number. (Even if the email address is different!) This includes big sites like Twitch, and also includes sites where you had selected the "only allow 2FA via security keys" option. Of course some of the blame here probably falls on those platforms, but both the fact that this is possible and the fact that Twilio encourages these patterns are reprehensible.