NIST declares the age of SMS-based 2-factor authentication over
This is the perfect being the enemy of the good.<p>They should be calling for secure, validated SMS.<p>Thinking that "Joe and Jane Six-Pack" are going to use Google Authenticator, is frankly laughable to anyone who does end-user support. But everyone understands "get a text and enter the code here"