2 ms·
What infra security prevents your customer from typing their password and TOTP code into someone else's website?
by 01HNNWZ0MV43FF 3y ago
What infra security prevents your customer from typing their password and TOTP code into someone else's website?
- seemaze 3y agoI was referring to an internal org with the ability to employ, e.g. DNS white/blacklisting, URL protection, hardware keys, and not sending official links requesting passwords and TOTP in the first place. As far as customers go, good luck. I'd drop a business that treated me this way without a second thought. The method only works if administered from a position of authority.