Show HN: Bring phone calls into the browser (sip-to-WebRTC)

Re:Show HN: Bring phone calls into the browser (sip-to-WebRTC) by walterbell on Thursday January 04, 2024 @03:49PM (#38872059)

Companies that mandate use of another company offer a good reason to shun both companies, when there are independent competitors which prioritize customer relationships over "business partner" relationships.

SMS is woefully insecure for multi-factor authentication, when we have TOTP and other open standards that work with local-only password managers.

[ Parent | on HN ]

Re:Show HN: Bring phone calls into the browser (sip-to-WebRTC) by xp84 on Thursday January 04, 2024 @06:34PM (#38873744)

And not only that, most companies that involve SMS in their IDP make it a master key (a single-factor) -- if you can read one text, you can take over the whole account without even having the password. I keep waiting for this to change, but out of all my banks not one supports a proper TOTP.

[ Parent | on HN ]