Re:Don't give away historic details about yourself
by dragonwriter on Tuesday April 10, 2018 @04:38PM
(#16805102)
> I agree, secret questions are dumb... but what are the alternatives?
Unless you are running a system intended as the users primary email provider, 2FA + email covers basically all the things that “security question” auxiliary passwords are used for, with both better usability and better security. For high security cases, 2FA + in person recovery may be more appropriate.
Unless you are running a system intended as the users primary email provider, 2FA + email covers basically all the things that “security question” auxiliary passwords are used for, with both better usability and better security. For high security cases, 2FA + in person recovery may be more appropriate.