News for hackers. Stuff that matters.

A comment on NIST declares the age of SMS-based 2-factor authentication over. Parent comment

Re:NIST declares the age of SMS-based 2-factor authenticatio... by icebraining on Tuesday July 26, 2016 @04:09AM (#12164046)
More to the point wouldn't adding an (optional) standard push notification API to TOTP clients be a better solution. You login, your phone pops up a notification, you hit accept on the notification, done. Way less annoying than even SMS.

How would that work when you're trying to login on your desk/laptop?

[ Parent | on HN ]

There are no comments on this comment yet.