this post was submitted on 19 Jul 2023
6 points (100.0% liked)

AusFinance

985 readers
1 users here now

founded 1 year ago
MODERATORS
 

Do you happen to know banks that meet these criteria?

  • Telephone banking (of some fashion) provided
  • TOTP for 2FA is a) available and b) its use is not contingent on the use of an app; 2FA seeds are freely exportable by the user via web login
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 1 points 1 year ago

Is it though? No offence but the vast majority of "people" do not know authentication well enough to be given their choice of login method.

And when we entrust non-security vendors to implement their own authentication, you get situations like ServiceNSW encrypting and storing credentials with a 4 digit pin.

If a bank wants to use a security vendor to strengthen their authentication, that's better than the alternative, I'd prefer that to what I have experienced with one of the big 4 where they still use SMS.