SMS OTP form best practices

Posted by feross on Wednesday December 02, 2020 @02:44PM
from the web.dev dept.

( 6 comments | 6 points | on HN )

Re:SMS OTP form best practices by SAI_Peregrinus on Wednesday December 02, 2020 @05:02PM (#25282282)

It's entirely appropriate that this link 404s, since the best practice for SMS OTP is "don't". Use TOTP or webauthn or FIDO2 instead.

[ Parent | on HN ]

Re:SMS OTP form best practices by Daviey on Thursday December 03, 2020 @03:57AM (#25286998)

Annoyingly, this article isn't on archive.org and google cache fails to show it either. It is however on Bing's cache.

Oddly enough, the publication date is 4th December. Maybe it was published by accident then hidden again?

[ Parent | on HN ]

Re:SMS OTP form best practices by Pjki889 on Wednesday December 02, 2020 @03:58PM (#25281545)

404

[ Parent | on HN ]

Re:SMS OTP form best practices by xvilo on Wednesday December 02, 2020 @04:41PM (#25282019)

404

[ Parent | on HN ]

Re:SMS OTP form best practices by lobo_tuerto on Wednesday December 02, 2020 @04:04PM (#25281619)

404

[ Parent | on HN ]

Re:SMS OTP form best practices by otherlandlabs on Wednesday December 02, 2020 @03:58PM (#25281534)

404

[ Parent | on HN ]