GitHub will begin its official rollout of two-factor authentication for developers who contribute code on the platform, starting March 13. GitHub added that it will support SMS text messages as a second factor, while testing FIDO Alliance passkeys internally to improve the security posture. “It is true that SMS 2FA can be easily phished by hackers as it relies on knowledge-based credentials. But GitHub recognizes these risks and strongly recommends using security keys and TOTPS wherever possible for greater security – [and] will continue to offer SMS for 2FA – which is better than removing the option entirely,” said Andrew Shikiar, executive director of the FIDO Alliance.


More

Mobile ID World: FIDO Alliance Launches Korea Working Group, Pushes For Global Adoption

Mobile ID World reports that the FIDO Alliance has announced the launch of the FIDO…

Read More →

SC Magazine: FIDO promotes device-based unified authentication standards

SC Media UK spoke to Alain Martin, co-chair of the new FIDO Europe Working Group,…

Read More →

PaymentsSource: Retailers get ready for a high-risk holiday season

FIDO Alliance Executive Director Brett McDowell tells PaymentsSource that while there is no single solution…

Read More →