Chuckanut
Give me a museum and I'll fill it. (Picasso) Give me a forum ...
So, I was looking at Vanguard's 2FA and noticed it uses a Yubikey device.
Great? Maybe not.
A customer still has to also register for the text msg codes. if the Yubikey is unavailable then they use the text message method.
In my mind this defeats the purpose of the Yubikey which is to eliminate the text msg method entirely since it is less secure than a time based system like the Yubikey or an Authenticator app.
Comments?
Great? Maybe not.
A customer still has to also register for the text msg codes. if the Yubikey is unavailable then they use the text message method.
In my mind this defeats the purpose of the Yubikey which is to eliminate the text msg method entirely since it is less secure than a time based system like the Yubikey or an Authenticator app.
Comments?