Lack of Email 2FA method when you have SMS #139625
Replies: 1 comment
-
💬 Your Product Feedback Has Been Submitted 🎉 Thank you for taking the time to share your insights with us! Your feedback is invaluable as we build a better GitHub experience for all our users. Here's what you can expect moving forward ⏩
Where to look to see what's shipping 👀
What you can do in the meantime 💻
As a member of the GitHub community, your participation is essential. While we can't promise that every suggestion will be implemented, we want to emphasize that your feedback is instrumental in guiding our decisions and priorities. Thank you once again for your contribution to making GitHub even better! We're grateful for your ongoing support and collaboration in shaping the future of our platform. ⭐ |
Beta Was this translation helpful? Give feedback.
-
Select Topic Area
Product Feedback
Body
I understand wanting to enforce 2FA as the damage that could happen if a very popular repo was comprised it would be massive, but if you you are going to support such a vulnerable method as SMS you have no reason to not allow email as it is more secure than SMS, yes auth apps are the best and that looks to be encouraged by the design, but IF you support SMS you should support email, that is like offering a router with only WEP and WPA3 support and ignoring the fact that WEP is trash and not offering anything between
If you wanted to say email is not good enough i would say fair enough, but you would need to drop sms support
I hate 2FA, i do not share passwords and i do not recycle them
Did you know google will let you setup SMS 2FA with your google voice number? thus requiring you to be logged in already to auth yourself
Beta Was this translation helpful? Give feedback.
All reactions