![]() ![]() So they say to not use voip or email for 2FA because you can't prove device possession, then say use PSTN that can prove uniqueness (possession?), but flip-flop by stating a problem with it is easy SIM device swaps.įrankly, I see NO issue with using email/voip. Verifiers SHOULD consider risk indicators such as device swap, SIM change, number porting, or other abnormal behavior before using the PSTN Methods that do not prove possession of a specific device, such as voice-over-IP (VOIP) or emailĪuthenticate to a public mobile telephone network using a SIM card or equivalent that uniquely identifies the device
0 Comments
Leave a Reply. |