3 ms·
But it could. What if the website I wanted to login to sent me a text with the token? Then all I had to do was reply to the text with a Y or N to log me in (o
by dpcan 13y ago
But it could.
What if the website I wanted to login to sent me a text with the token? Then all I had to do was reply to the text with a Y or N to log me in (or enter the code directly into the site if I wanted to).
When the text back is received by the host, my browser finishes the login request.
If you can sync your texts with your PC, maybe it could all be done right on the same screen where you are trying to login.
I think this could be mainstream. The hurdles don't seem that huge, and you can still leave passwords in place for a while until everyone is on board.
- arnarbi 13y agoThis is already mainstream. Facebook even pulls the code directly from your SMS if you are logging into their Android app. It's just that it's a second factor to the password. Your phone can be stolen as well (although such theft is harder to scale) - so keeping the knowledge-test around is important. I agree though, if you don't care about security, OTPs are potentially much more convenient than traditional passwords.
- stanleydrew 13y agoBe careful here. The SMS "from" number can be spoofed. So it doesn't quite work to have a user simply reply with 'Y' to an authentication text, unless the reply includes something only known to the service and the user.