Timeline for Why is email often used as the ultimate verification?
Current License: CC BY-SA 4.0
8 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 4, 2021 at 17:59 | comment | added | barbecue | I guess my point is that if you have lots of security features, but they can all be unlocked with a 4 digit pin, then effectively you only have a 4 digit pin. | |
| Jan 4, 2021 at 17:57 | comment | added | barbecue | @gerrit I use keepass too, and I have email addresses that I never check from my phone. But realistically, we're a small minority of users. A password and a text message, or a password and an authenticator app, or an email and a password, etc., all come through one device, which most people want to be as convenient (thereby insecure) as possible. | |
| Jan 4, 2021 at 17:54 | comment | added | gerrit | @barbecue Sure, but access by password alone would be single factor authorisation so not appropriate for online banking. And people should use password managers on their smartphone (I use keepass2android). | |
| Jan 4, 2021 at 14:22 | comment | added | barbecue | @gerrit the problem isn't the bank, it's the phone. Banking by phone, banking by text message, banking by app, banking by browser. Whatever new channels you add, customers will figure out how to make them available on their phones, small portable devices that are easily stolen. Banks can't force customers to use desktop computers. And since typing strong passwords on a phone is a huge pain, people either use simple passwords or save them on the phone. | |
| Jan 4, 2021 at 9:11 | comment | added | gerrit | @Joshua I sure hope no bank in the world lets people reset their account by email alone! I've never had a bank that would send anything by email except "there is a message in your account" (which is borderline already) or general information. | |
| Jan 4, 2021 at 6:51 | comment | added | AnFi onet.eu | @Joshua I assume your bank account processes enough money to make it above "low(/medium) security" :-) | |
| Jan 4, 2021 at 3:15 | comment | added | Joshua | I told my bank I regard it as less secure as not doing it. Hint: my phone was stolen, where you do think that email went? | |
| Jan 1, 2021 at 13:25 | history | answered | AnFi onet.eu | CC BY-SA 4.0 |