Push dual factor

Posted Apr 18, 2023 8:24 UTC (Tue) by Aissen (subscriber, #59976)
In reply to: Push dual factor by pizza
Parent article: TOTP authentication with free software

> You're conflating _services_ with _software_. "Open Source" can only ever provide the latter, whereas multi-factor authentication is a _service_ that is itself bolted onto another service.

I'm talking about protocols and software. Whether services use any of the two is orthogonal. I'm saying there are neither right now. If I want an MFA solution for my org that has mobile push notifications, there is neither an open protocol one, nor open clients and servers.

Otherwise I agree with your points about the biggest identity providers having the most power. Doesn't mean there can't be alternatives.