3 ms·Of all the things to be upset about, mandatory 2FA doesn't seem like one.by ceejayoz 6mo agoOf all the things to be upset about, mandatory 2FA doesn't seem like one.ipaddr 6mo ago2FA has been in place for years through email but this new requirement forces a phone.ceejayoz 6mo agoGood. E-mail based 2FA is bad, and they appear to support TOTP too as an option, as they should. Wish they supported U2F though.ipaddr 6mo agoWhy is email based 2fa bad but phone good? There are classes of issues you get through phone 2fa compared to emailceejayoz 6mo agoTypically, you can also reset password via email, so it's really only one factor. Compromised email = compromised server.