Re:Sendgrid under siege from hacked accounts
by Farfromthehood on Saturday August 29, 2020 @03:35PM
(#24318824)
Sendgrid user for many, many years.
I believe we disabled 2FA because it broke /prevented our client's ability to send via SMTP. No idea if they've fixed the issue (and honestly don't care). Make security easy to adopt of you want us to implement it.
Also, organization-wide, we don't use 2FA that requires a mobile phone number/SMS (because we don't trust vendors with our phone number).
*IIRC, Sendgrid initially only offered 2FA via SMS, but now you can also use an authenticator app.
I believe we disabled 2FA because it broke /prevented our client's ability to send via SMTP. No idea if they've fixed the issue (and honestly don't care). Make security easy to adopt of you want us to implement it.
Also, organization-wide, we don't use 2FA that requires a mobile phone number/SMS (because we don't trust vendors with our phone number).
*IIRC, Sendgrid initially only offered 2FA via SMS, but now you can also use an authenticator app.