New answers tagged

1

Two-way verifications are much more secure due to using different communication channels. The first path will be better in terms of user experience and security. You need to reduce the barrier Two-way verification cycles can be embedded to sign-up process. SMS for an individual can cost money. If you make your user to pay for your SMS; they can feel that ...


1

I'm surprised that nobody has pointed out that this is wide open to a spoofing attack. Sending an SMS with a spoofed originator (the sender) is incredibly easy and costs very little to do. You can't trust that the message has come from the genuine owner of the number (or even that the number exists at all). The traditional model (where you send the user a ...


1

Sorry to use the answer function, but I don't have enough reputation to comment yet. :( I just wanted to say I really like the 4 step approach that Monomeeth suggests. I'm a huge fan of the KISS principle and this approach seems to fit. The only negative of it that I can see is if you're laying in bed in the middle of the night next to your partner and ...


0

In terms of security, both will be pretty similar. However, in terms of user friendly, I would not request my user to send a text message to my system. Not everyone has text messages in their plan, since the age of whatsapp, imessage and the like. It could possibly cost them a small amount of money and that could be a barrier. Unless of course, it costs ...


0

There is a lot already happening to improve this UX, of switching apps to see token value. Let me summarize: 1) A lot of apps today are able to wait and read the incoming SMS to detect the code and pre-fill it for the user. I think that is a very good way forward and more of a enhancement rather than a total new solution. It has a back compatibility that if ...


2

I have to be honest and say I have never liked the idea of verifying mobile phones as a security measure. More places are starting to use this as their sole verification method, which causes major problems for people without mobile phones as there is no way for them to create accounts with some of these providers. I do, however, think it is a perfectly valid ...


6

Both are equally good in terms of security. According to me the first senerio is good enough and adapted one. We are used to first senerio. The second senerio doesn't making much changes and unnecessarily user will confused with the new approch to do things. In terms of UX, the first senerio is much easy and user know this gonna happen. Most of the ...



Top 50 recent answers are included