maartendb

First of all, I'm not a security expert so I'm talking about the end-user experience.

While trying to enable 2FA for my Paypal account I couldn't find the option in my settings page. This couldn't be true so I googled it. I found a Paypal page which mentions 2FA via text message and a 3rd party website mentions Symantec's VIP. For both options you'd have to dig into the Paypal site to enable them.

How can it be that a payment gateway of this size makes it this difficult to enable 2FA?

I read that they've had their issues with 2FA but still, this should have been solveed by now.

I'd love to see more transparency in the way CDNs decide to cache or not cache your content. For example: Cloudflare publishes crawl frequencies in their pricing table but what do they actually do with that content? Push it to all their edges? I'd doubt that. I guess it's based on website traffic, your website pricing plan, ... but it seems quite arbitrary to me.