Naks
Honorary Master
- Joined
- Jun 3, 2009
- Messages
- 10,052
- Reaction score
- 5,982
@AfriNatic - I think at the very least Afrihost (and other companies) should :
1. provide for the option of changing between SMS and e-mail to get the OTP's (without having to contact Afri. support channels) ;
2. look at implementing other widely used 2nd factor options like Google Authenticator, which changes user login codes every minute .... (I assume you know this already)
![]()
Enabling Two-Factor Authentication for Your Web Application
A developer discusses the nature of two-factor authentication, i.e. how it works and why it is used, and then shows some code you can use to set it up.dzone.com
![]()
Integrating Google Authenticator (2 Factor Authentication) into your PHP Website
Technical Blog for all PHP developers. Articles on Wordpress,cakephp,Codeigniter and Core phpphpdudes.blogspot.com
As a side note,. I've personally experienced not getting the SMS coming through when trying to login to your ClientZone, a number of times. Who's fault is that - Afri's for not sending it out, or the network operator for thereafter not passing it on ? (assuming this is how it works in the first place).
With Authenticator, there's always a code available to login with, wherever you are in the world.
this is precisely why I wanted the delivery mechanism to be email instead of SMS.
and yes, using a secure third-party 2FA would be much better than sending SMSs over GSM

