I thought they still did for website flow at least. Bizarrely we seem to think that phone apps are infinitely secure and don't need the extra step because biometrics?
Isn’t it because the assumption is that a mobile device is personal in 99,99999% of cases while it’s common (less now than 15 years ago) with shared computers in libraries, schools, etc.
ItsBob|3 months ago
However, I use a Yubikey as often as I can nowadays and authenticator apps too where possible.
I'd like the option to use one but I can't :(
cjrp|3 months ago
Ntrails|3 months ago
victorbjorklund|3 months ago