4 ms·
I'm totally not advocating for 2FA over SMS. It's also just not secure enough. What if the website presented a QR you can scan with Aegis and then Aegis would
by yoavm 3y ago
I'm totally not advocating for 2FA over SMS. It's also just not secure enough.
What if the website presented a QR you can scan with Aegis and then Aegis would make a request with your one time code? You could still type it manually - there would be an input and a QR code next to it.
- sliken 3y agoKinda surprised banks aren't more current with security, after all even NIST recognizes the problem with 2FA over SMS: https://www.nist.gov/blogs/cybersecurity-insights/questionsand-buzz-surrounding-draft-nist-special-publication-800-63-3 https://www.nist.gov/blogs/cybersecurity-insights/questionsa...