> Security? The best I ever had from banks. I'm baffled. In Germany, the chipTAN method [1] [2] is pretty standard, which uses the bank card as a cryptographic

> Security? The best I ever had from banks. I'm baffled. In Germany, the chipTAN method [1] [2] is pretty standard, which uses the bank card as a cryptographic element. And usually, German IT seems to be years behind the industry standard (e.g. I don't know a popular German e-mail provider that offers 2FA.) [Edit] This is the best thing about chipTAN: Even if the computer is subverted by a trojan, or if a man-in-the-middle attack occurs, the TAN generated is only valid for the transaction confirmed by the user on the screen of the TAN generator, therefore modifying a transaction retroactively would cause the TAN to be invalid. [/Edit] [1] In action: https://www.youtube.com/watch?v=5gyBC9irTsM&t=41s https://www.youtube.com/watch?v=5gyBC9irTsM&t=41s [2] https://en.wikipedia.org/wiki/Transaction_authentication_number#chipTAN_.2F_cardTAN https://en.wikipedia.org/wiki/Transaction_authentication_num...