Founder of @Authy here. Happy to answer any questions.
What's your take on U2F?
Authy is joining Twilio
11–20 of 73 posts
Re: Authy is joining Twilio
#12Re: Authy is joining Twilio
#13What is the reason for all of these 2FA apps? This is completely unnecessary. If you're going to offer 2FA, please offer at least the following: * TOTP * Yubikey * SMS If you want to partner with someone and ram unnecessary apps down our throats, optionally add the following: * Authy * RSA * etc I have places where I want 2FA but I will not install the Authy app, so I go without. Sorry. Let me use TOTP or my Yubikey.
You do realise that with authy you're just registering TOTP stuff right? It's not on the same level as what you're mentioning. It's like complaining about having to use Firefox instead of google.com
Re: Authy is joining Twilio
#14What is the reason for all of these 2FA apps? This is completely unnecessary. If you're going to offer 2FA, please offer at least the following: * TOTP * Yubikey * SMS If you want to partner with someone and ram unnecessary apps down our throats, optionally add the following: * Authy * RSA * etc I have places where I want 2FA but I will not install the Authy app, so I go without. Sorry. Let me use TOTP or my Yubikey.
I don't understand this rage. I've used Authy with regular TOTP services, and in some cases where I was explicitly told to use something else like Google Authenticator. Unless this changes, I don't see any reason to stop using Authy.
Re: Authy is joining Twilio
#15What is the reason for all of these 2FA apps? This is completely unnecessary. If you're going to offer 2FA, please offer at least the following: * TOTP * Yubikey * SMS If you want to partner with someone and ram unnecessary apps down our throats, optionally add the following: * Authy * RSA * etc I have places where I want 2FA but I will not install the Authy app, so I go without. Sorry. Let me use TOTP or my Yubikey.
What makes Yubikey part of the "default" set but not Authy or RSA?
This seems awfully like "If you're going to offer 2FA, at least offer all the tools I like, before you offer any tools that I don't like".
It's also worth noting that Authy's app supports TOTP, last I looked.
Re: Authy is joining Twilio
#16Founder of @Authy here. Happy to answer any questions.
Do you have any plans for a Windows Phone app? The SMS backup works well, but an app would be ideal; it's one of the few things I'm still missing after switching from Android.
Re: Authy is joining Twilio
#17Earlier quoted context omitted.
Why does Authy require I provide my cell phone number and email address? Why do I have to have a user account? This is completely ridiculous. I do not need nor want cloud syncing or backup. You are making Authy a potential target for attacks by associating a user to cloud stored 2FA information. This is not in the spirit of 2FA.
Hi, good question. The reason for the phone number is that we depend on your phone number as part of your identity. Almost all 2-FA systems today use the phone number as a way to send you the code via text/phone call. If you read my blog post: blog.authy.com/twilio you'll see we decided to build our infrastructure on top of the telecom infrastructure because it was ubiquitous. I also understand why some people don't…
This tweet indicates you're using TOTP, slightly modified from Google's implementation:
https://twitter.com/authy/status/498244613766139904
@benmcginnes Yes we are RFC 6238 TOTP compatible.
Same algorithm as GAuth but 7 digits, 256 bit keys and 10 seconds window.
Re: Authy is joining Twilio
#18Founder of @Authy here. Happy to answer any questions.
Do you have any plans for a Windows Phone app? The SMS backup works well, but an app would be ideal; it's one of the few things I'm still missing after switching from Android.
Hi, very likely. We will be investing a lot more resources into Authy - Windows Phone App is very high at the top of things we are thinking of doing.
Re: Authy is joining Twilio
#19Interesting acquisition, glad to see authy as a service living in Twilio instead of just using it. Can't wait to see it in the portal. Make sure you read Jeff's post as well.
Re: Authy is joining Twilio
#20What is the reason for all of these 2FA apps? This is completely unnecessary. If you're going to offer 2FA, please offer at least the following: * TOTP * Yubikey * SMS If you want to partner with someone and ram unnecessary apps down our throats, optionally add the following: * Authy * RSA * etc I have places where I want 2FA but I will not install the Authy app, so I go without. Sorry. Let me use TOTP or my Yubikey.
You do realise that with authy you're just registering TOTP stuff right? It's not on the same level as what you're mentioning. It's like complaining about having to use Firefox instead of google.com
Then why do they need an account or my phone number to do TOTP?