Do you happen to know banks that meet these criteria?

  • Telephone banking (of some fashion) provided
  • TOTP for 2FA is a) available and b) its use is not contingent on the use of an app; 2FA seeds are freely exportable by the user via web login
  • RealVenom
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 year ago

    Is it though? No offence but the vast majority of “people” do not know authentication well enough to be given their choice of login method.

    And when we entrust non-security vendors to implement their own authentication, you get situations like ServiceNSW encrypting and storing credentials with a 4 digit pin.

    If a bank wants to use a security vendor to strengthen their authentication, that’s better than the alternative, I’d prefer that to what I have experienced with one of the big 4 where they still use SMS.