Discuss mailing list

[Calum McAlinden <calum AT mcalinden.me.uk>]

On 08/03/2014, Peter Green <peter AT greenpete.free> wrote:
>> Multiple forms of second factors is definitely a good idea.
>> Maybe something like a new code displayed each login that you need to
> use in addition to your password next time?
>
> Yes, I like that idea more.
>
> I personally wouldn't feel happy about giving out my personal phone
> number, (in fact 'I' simply wouldn't), nor would I want to use an app'
> on my phone, or a third party system such as those provided by the data
> hungry google.
>
> The latter reminds me of modern websites that pull in any number of
> third party systems. I would prefer all 'in house' systems, but I guess
> others are happy to use these other services. Though given the state of
> data handling and privacy these days, I think people are thinking twice
> - at last...
>
> Peter

Apps such as Google Authenticator use a fully open and documented
standard, so there is no requirement to use any specific commercial
app.  The apps don't need to know anything about the phone or have any
permissions besides capturing a QR code.