you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 23 hours ago (3 children)

It fails for somebody every day, it adds a dependency for a known unreliable 3rd party that often mangles the identification data it sends back, it is exploited by that 3rd party for extending their monopoly, and it gives that 3rd party (or any hacker that got access to them) full access to impersonate any user it wants.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 14 points 23 hours ago (2 children)

    What?

    Implement TOTP and let your users use their preferred authenticator and none of what you're struggling with will apply.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 20 hours ago* (1 child)

    Oh, yeah, and of course there's someone on the internet talking about the MFA protocol that no corporation uses.

    That one is obligatory too.

    (Anyway, yes, if you need MFA, use TOTP. That's a non-brainier. Except that corporations don't have brains.)

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 1 hour ago

    Amazon, Facebook, and many more support TOTP in whatever authenticator you want. I don't particularly like either of those websites but they are massive and directly contradict your claim that no corporation uses this normal method of 2FA.

  • source
  • parent