3 ms·
The thing about SMS is it's comparatively neutral. It's not proprietary like imessages, not a mitm attack like whatever the protocol google tries to insert for
by andy99 3y ago
The thing about SMS is it's comparatively neutral. It's not proprietary like imessages, not a mitm attack like whatever the protocol google tries to insert for you is. With respect to authentication, the same applies. I see companies now forcing you on to an app ostensibly for 2FA but obviously just to ransom you into the app to up their metrics. And SMS works on dumb phones.
- hirsin 3y agoHow many sites actually do that? Microsoft does it for the device compliance/SSO/push notification stuff. Heck even we (GitHub) don't push the app and require TOTP or SMS first if you want to use the app.