← Back to context

Comment by huslage

3 days ago

How the heck are credential compromises still a thing with 2FA and refresh tokens???

Since there is no requirement for anyone to use them... people don't use them. If people aren't forced to do the right thing, they do the lazy thing.