Hacker News new | ask | show | jobs
by Spooky23 2724 days ago
Look at the NIST defined identity assurance levels and the guidance for MFA issuance.

Trust isn’t cheap. Credit based verification services are better than email. Adding verification via physical mail adds some value.

Fundamentally, you need to decide whether it’s important to know that I am in control of the email address associated with “Spooky23”, or that I am a particular human being.