Hacker News new | ask | show | jobs
by bawolff 1923 days ago
Email is much worse than SMS.
1 comments
akvadrako 1923 days ago
It could be better if the sender's SMTP server forced the use of TLS. Most emails are now sent encrypted but it isn't usually enforced.

If your control your own receiving server then it would be hard for someone to intercept the message.

link
bawolff 1922 days ago
That's not why its bad.

Its bad because 85% of the usecase of 2fa is people using bad passwords. If you use a bad password in one place, you probably are also doing so on your email.

link