Most people historically would consider a video call with the person to be sufficiently authenticated. Yeah, that has changed obviously, but it has changed like today.
No, not today. This has already happened a few times. And even before it happened people warned about this predictable use of the technology. There has been enough time to update policies. Even $employer already did, and I consider their security policies so-so.
Comments
Secret doesn't mean they can't use internal authenticated communication channels, at the very least to send a redacted confirmation.
Most people historically would consider a video call with the person to be sufficiently authenticated. Yeah, that has changed obviously, but it has changed like today.
No, not today. This has already happened a few times. And even before it happened people warned about this predictable use of the technology. There has been enough time to update policies. Even $employer already did, and I consider their security policies so-so.
You can send out free zoom and Google meet links.
Idk if most people would tell the difference