• 0 Posts
  • 18 Comments
Joined 1 year ago
cake
Cake day: June 16th, 2023

help-circle








  • I use Fastmail.

    My domain has me plus the wife, and she’s not willing to tolerate any amount of fiddling or bugs or anything, so we needed something that would Just Work™, and Fastmail fits the bill quite well.

    Their features are great, I actually prefer their app over the native iOS app, and they’ve been rock solid since I signed up. I can also have any amount of aliased and I can put all three of my domains on there. Plus they’re not Google which was the biggest thing I needed them to be.








  • Doesn’t matter too too much for a TOTP though. It just needs to be pseudorandom enough for a relatively difficult to guess 6 digit (or longer) code that changes every 30 seconds. Much more likely for someone to get phished for their TOTP than for someone to reverse engineer someone’s TOTP seed. Plus how would that even happen? The attacker would need to have the device and / or track the user’s 6 digit codes for quite a while at which point the game’s already up.