4 ms·

Yep, while I like moving all snail mail to email, I hate that (almost) every single service now just sends a "monthly/quarterly report now available in your acc

Yep, while I like moving all snail mail to email, I hate that (almost) every single service now just sends a "monthly/quarterly report now available in your account area!" email. A rare few of them at least offer the option of just sending it attached (with the default being a useless reminder email), but most are essentially a chore, because nearly everything here uses phone+2FA as login rather than a password or passkey.

LexGray 2y ago
Passkey does seem like it should include functionality to encrypt and sign all email and SMS automatically. A missed opportunity.
OptionOfT 2y ago
For that reason I actually have decided to get everything via snail-mail. When BofA sends me a new statement I need to: * click on the link in my inbox * wait for the email-provider to scan the email (and Office 365 does sometimes tell me they can't scan the link) (either) * Enter my username & password * Select that I want my 2FA via call or text * Wait for the call or text to arrive * Enter it (now I'm signed in) (or) * search my house for my YubiKey * lean over to insert YubiKey * click cancel on the Windows popup for the passkey * click cancel on the Bitwarden popup for the passkey * click Physical key on the Chrome / Edge popup for passkeys * put in YubiKey pin * lean over again to physically touch YubiKey (end) * Click no on the next credit card offer * Navigate to Credit Cards * Click the Credit Card * Click Documents * Click current statement or when I'm on my walk (which I do anyway) * insert key in mailbox * (no delay) open mailbox * (no delay) take out letters * (no delay) close mailbox * (no delay) remove key * walk home * open statement * validate statement * trash statement Even with passkeys there are too many where the flow can / purposefully is interrupted.
fn-mote 2y ago
> because nearly everything here uses phone+2FA as login Here in the US we only wish things were that secure. Unless by 2FA you mean “code sent via SMS”.
- smileybarry 2y ago
  Sadly I mean "code sent via SMS", which is one reason why I haven't automated much of the retrieval for these things.

LexGray 2y ago

Passkey does seem like it should include functionality to encrypt and sign all email and SMS automatically. A missed opportunity.

OptionOfT 2y ago

For that reason I actually have decided to get everything via snail-mail. When BofA sends me a new statement I need to: * click on the link in my inbox * wait for the email-provider to scan the email (and Office 365 does sometimes tell me they can't scan the link) (either) * Enter my username & password * Select that I want my 2FA via call or text * Wait for the call or text to arrive * Enter it (now I'm signed in) (or) * search my house for my YubiKey * lean over to insert YubiKey * click cancel on the Windows popup for the passkey * click cancel on the Bitwarden popup for the passkey * click Physical key on the Chrome / Edge popup for passkeys * put in YubiKey pin * lean over again to physically touch YubiKey (end) * Click no on the next credit card offer * Navigate to Credit Cards * Click the Credit Card * Click Documents * Click current statement or when I'm on my walk (which I do anyway) * insert key in mailbox * (no delay) open mailbox * (no delay) take out letters * (no delay) close mailbox * (no delay) remove key * walk home * open statement * validate statement * trash statement Even with passkeys there are too many where the flow can / purposefully is interrupted.

fn-mote 2y ago

> because nearly everything here uses phone+2FA as login Here in the US we only wish things were that secure. Unless by 2FA you mean “code sent via SMS”.

smileybarry 2y ago
Sadly I mean "code sent via SMS", which is one reason why I haven't automated much of the retrieval for these things.