News for hackers. Stuff that matters.

A comment on Why we went passwordless on our new product. Parent comment

Re:Why we went passwordless on our new product by toddh on Monday March 08, 2021 @12:50PM (#26388964)
How about a code delivered through SMS? Especially for mobile apps?
[ Parent | on HN ]
Re:Why we went passwordless on our new product by borplk on Wednesday March 10, 2021 @02:44AM (#26408852)
Same problem. A good login mechanism needs to rely on a "previously agreed upon" mechanism to perform the login and not break because an SMS or email is delayed. A password works this way. TOTP/HOTP 2FA also works this way.
[ Parent | on HN ]