2FA (was: Preventing account takeovers through expired domains)
Demi Marie Obenour wrote:
Security keys are the only form of 2fa that is immune to
phishing attacks.
U2F and FIDO2 are said to be immune to phishing. HOTP, TOTP and various
proprietary challenge-respone protocols are not immune.
Björn Persson
Attachments:
- attachment.sig (application/pgp-signature — 833 bytes)