coates’s Twitter Archive—№ 21,270

lizrice I think “better” is indeed key, and it makes regular authentication not replayable in case of log/leakage or temporary MITM. So yep, not *really* 2FA, but also not just 1FA on the places you’re authenticating, but close to 1FA if 1P itself is compromised.