Let's Ban SMS 2FA
There, I said it.
Now that I’ve got that out of the way, let’s talk a bit about why we should actually ban SMS 2FA.
The problems
SMS 2FA is something of a paradox in and of itself. Two-factor authentication is generally positioned as a way to increase your security; however, SMS messaging is inherently insecure, since it is unencrypted and SMS messages are publicly broadcast wirelessly. This means that bad actors who are physically near to you can trivially snoop on 2FA codes that are texted to ...
Read more at lorendb.dev