GitHub will begin its official rollout of two-factor authentication for developers who contribute code on the platform, starting March 13. GitHub added that it will support SMS text messages as a second factor, while testing FIDO Alliance passkeys internally to improve the security posture. “It is true that SMS 2FA can be easily phished by hackers as it relies on knowledge-based credentials. But GitHub recognizes these risks and strongly recommends using security keys and TOTPS wherever possible for greater security – [and] will continue to offer SMS for 2FA – which is better than removing the option entirely,” said Andrew Shikiar, executive director of the FIDO Alliance.


More

One World Identity: Open Sesame: Building Authentication Standards

Host Cameron D’Ambrosi joins FIDO Alliance Executive Director Brett McDowell to discuss the oft-foretold death…

Read More →

The Wall Street Journal: Aetna Adds Behavior-Based Security to Customer Application

Insurance giant Aetna is rolling out a consumer mobile app that uses FIDO Authentication with…

Read More →

CSO: The Internet of Identities (IoI)

IoT, mobility, cloud and pressing security needs mean that every node must have a trustworthy…

Read More →