Why is there not a Security section

jimlambe

I wanted to ask a question about banks using 2FA authentication (not OTP via SMS) but was unable to even find a post mentioning it. When I went to find a section to post into, the nearest appropriate section that I could see was "TECHIE STUFF" but all that is there is non-financial techie stuff.

1) Why is there no security section on the forum
2) Where the hell should I ask a security question on the forum

Jim!

[Deleted User]

jimlambe wrote: »

I wanted to ask a question about banks using 2FA authentication (not OTP via SMS) but was unable to even find a post mentioning it. When I went to find a section to post into, the nearest appropriate section that I could see was "TECHIE STUFF" but all that is there is non-financial techie stuff.

1) Why is there no security section on the forum
2) Where the hell should I ask a security question on the forum

Jim!

Tech, budgeting & bank accounts take your pick

jamesd

In general the current best two factor authentication question is likely to include "get and use a fido2 physical key" but fido1 or only part of fido2 is used in Google's most secure option for their employees, journalists and other potential phishing targets.

Banks probably aren't up to date enough to use either.

Recent Android or Apple mobile phones with fingerprint readers and secure key storage can also be used as physical keys. SMS not involved and not vulnerable to phone number transfer attacks.

With the physical key the webauth protocol lets you securely prove your identity with say a finger or button press.

Uxb1

jimlambe wrote: »

I wanted to ask a question about banks using 2FA authentication (not OTP via SMS) but was unable to even find a post mentioning it. When I went to find a section to post into, the nearest appropriate section that I could see was "TECHIE STUFF" but all that is there is non-financial techie stuff.

1) Why is there no security section on the forum
2) Where the hell should I ask a security question on the forum

Jim!

Well you can try the banking and budgeting forum
Here is a long thread of 293 replies under a rather less than helpful title I'd admit!
https://forums.moneysavingexpert.com/discussion/6021774/strong-customer-authentication-now-delayed-changes-to-online-verification