Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Authy is joining Twilio

authy.com

Post reply on HN
Print view View original

1–10 of 73 posts

Re: Authy is joining Twilio

#2

Post by feld »

What is the reason for all of these 2FA apps? This is completely unnecessary. If you're going to offer 2FA, please offer at least the following:

  * TOTP
  * Yubikey
  * SMS
If you want to partner with someone and ram unnecessary apps down our throats, optionally add the following:

  * Authy
  * RSA
  * etc
I have places where I want 2FA but I will not install the Authy app, so I go without. Sorry. Let me use TOTP or my Yubikey.

Re: Authy is joining Twilio

#4

Post by oms1005 »

Interesting acquisition, glad to see authy as a service living in Twilio instead of just using it. Can't wait to see it in the portal. Make sure you read Jeff's post as well.

Re: Authy is joining Twilio

#6

Post by feld »

danielpal wrote: post #3

Founder of @Authy here. Happy to answer any questions.

Why does Authy require I provide my cell phone number and email address? Why do I have to have a user account? This is completely ridiculous. I do not need nor want cloud syncing or backup. You are making Authy a potential target for attacks by associating a user to cloud stored 2FA information.

This is not in the spirit of 2FA.

Re: Authy is joining Twilio

#7

Post by danielpal »

feld wrote: post #6
danielpal wrote: post #3

Founder of @Authy here. Happy to answer any questions.

Why does Authy require I provide my cell phone number and email address? Why do I have to have a user account? This is completely ridiculous. I do not need nor want cloud syncing or backup. You are making Authy a potential target for attacks by associating a user to cloud stored 2FA information. This is not in the spirit of 2FA.

Hi, good question. The reason for the phone number is that we depend on your phone number as part of your identity. Almost all 2-FA systems today use the phone number as a way to send you the code via text/phone call. If you read my blog post: blog.authy.com/twilio you'll see we decided to build our infrastructure on top of the telecom infrastructure because it was ubiquitous.

I also understand why some people don't like clouds backups. The good news is that backups are off by default and optional. If you don't need them, you can keep them disabled.

Post reply on HN