News for hackers. Stuff that matters.

A comment on Mozilla Standards Positions Opposes Web Integrity API. Parent comment

Re:Mozilla Standards Positions Opposes Web Integrity API by pjmlp on Tuesday July 25, 2023 @02:23AM (#36858658)
> SMS 2FA at best

Because their customers aren't security nerds that have smartphones with authentication apps.

They want people that barely get smartphones, or still use feature phones, to be able to access their services with some improved security workflows.

[ Parent | on HN ]
Re:Mozilla Standards Positions Opposes Web Integrity API by pmontra on Tuesday July 25, 2023 @06:03AM (#36860145)
The apps of the banks often generates an OTP or intercept a push notification, ask for fingerprint and send an authorization response back to the server. I go through that with each of my banks every time I login or make some money transfer.

I got codes via SMS when I installed those apps and I had to prove that I owned the phone number I was associating with the app.

[ Parent | on HN ]
Re:Mozilla Standards Positions Opposes Web Integrity API by pjmlp on Tuesday July 25, 2023 @06:07AM (#36860169)
Good example of what many non-techie people will never understand, or even have phones capable of doing it.
[ Parent | on HN ]