Isn't that solvable by not requiring 2fa for "registered" devices? | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		lutorm on Jan 11, 2020 \| parent \| context \| favorite \| on: SMS is not 2FA-secure Isn't that solvable by not requiring 2fa for "registered" devices?

tempestn on Jan 11, 2020 | [–]

Exactly. You should only have to enter the second factor on a given device once, at least optionally.

lrem on Jan 11, 2020 | [–]

What about the device getting compromised?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact