undefined | Better HN

0 pointsTelaneo2mo ago0 comments

Not add 2fa automatically, but instead prompt with options to add it.

This probably doesn't comply with the relevant recommendations, but cutting a user of from their email is worse in my opinion.

0 comments

deepsun2mo ago

I'm sure Google prompted author for years begging to turn the 2FA on, as well as warning that they will enforce it on day X. Author ignored them all.

mulmen2mo ago

Why is 2FA so critical it’s worth proactively breaking the user? What’s the even more bad thing that would (not could) happen to the user if 2FA was not enabled?

namibj2mo ago

Password database leaks turning into spam/proxy farms of very well aged accounts.

mulmen2mo ago

That’s a could.

TelaneoOP2mo ago

That doesn't make forcing it any less wrong.

j / k navigate · click thread line to collapse

0 comments

deepsun2mo ago

I'm sure Google prompted author for years begging to turn the 2FA on, as well as warning that they will enforce it on day X. Author ignored them all.

mulmen2mo ago

Why is 2FA so critical it’s worth proactively breaking the user? What’s the even more bad thing that would (not could) happen to the user if 2FA was not enabled?

namibj2mo ago

Password database leaks turning into spam/proxy farms of very well aged accounts.

mulmen2mo ago

That’s a could.

TelaneoOP2mo ago

That doesn't make forcing it any less wrong.

j / k navigate · click thread line to collapse