Re:Microsoft urges users to stop using phone-based multi-fac...
by tinus_hn on Friday November 13, 2020 @02:22PM
(#25086285)
No. For two factor authentication to work the solution needs to be practical for most people. So it can’t involve multiple phones or backup schemes most people aren’t going to implement.
Otherwise you’re going to lock a lot of people out of their accounts which is not acceptable.
Ultimately this typically ends up with a reset scheme that depends on phone numbers or email addresses which means the protection, which is as strong as the weakest link, is worthless.
Otherwise you’re going to lock a lot of people out of their accounts which is not acceptable.
Ultimately this typically ends up with a reset scheme that depends on phone numbers or email addresses which means the protection, which is as strong as the weakest link, is worthless.