[Cryptography] Two-factor: For Others, But Not Oneself?

[Viktor Dukhovni]

On Wed, Apr 02, 2025 at 02:47:32PM -0700, Kent Borg wrote:

> Do all those people who proselytize the two-factor religion (I think now
> renamed "multi-factor") actually use two-factor-anything in their own
> worlds, on themselves?

Don't know about "all", but at least some large organisations (I've
recently been employed at one such) actually do use two-factor within
IT.  And it is less burdensome in that context, because lost devices can
be easily replaced at least if you're working on premises.  The real
pain of factor is for consumers who've lost access to their two-factor
device, and may then never regain access to their data.

-- 
    Viktor.