On 9 Oct 2023 17:13:10 -0400, Jim Henderson wrote:

> FWIW, SMS is far less secure than an app.  IMEI cloning renders SMS
> verification one of the least secure options out there.

Actually, this isn't the correct reason, but it still is pretty insecure.

https://www.okta.com/blog/2020/10/sms-authentication/ (I worked for an 
Okta competitor, but this article spells it out pretty well.)

It's better than nothing, but not better than TOTP.



-- 
"I learned long ago, never to wrestle with a pig. You get dirty, and 
besides, the pig likes it." - George Bernard Shaw

Post a reply to this message