<div dir="ltr"><div><div><div>Mark,<br><br></div>On a security vs affordability basis, how exactly would SMS 2FA not be an effective solution?<br><br></div>Unless you are going to hack the Telco SMS Gateway where the SMS is in clear txt, in which case I would think even our M-Pesa Pins would be vulnerable, where else is do you have a credible attack surface?<br><br></div>Rgds<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Jun 30, 2017 at 3:25 PM, Mark Kipyegon via kictanet <span dir="ltr"><<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF">
<div>
<div><span class="m_6617591784149783904Apple-style-span">SMS as a form of 2FA is unsuitable
considering the sensitivity of such information. On the other hand a government backed smart card would offer the appropriate level of authentication without locking out access to a section of users.</span><br>
</div><span class="">
<div><br>
On 30 Jun 2017, at 12:30, "Denis G. Wahome" <<a href="mailto:dwahome@gmail.com" target="_blank">dwahome@gmail.com</a>> wrote:<br>
<br>
</div>
<div></div>
<blockquote type="cite">
<div>
<div dir="ltr">Mark,
<div><br>
</div>
<div>While I do concur completely with your observation. I was considering the user group for the service. Other more advanced mechanisms would reduce the usability/accessibility by a large portion of the Country.</div>
<div><br>
</div>
<div>A better way would be a registration process to access your records where one can select a Channel for 2FA</div>
<div><br>
</div>
<div>Denis</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Fri, Jun 30, 2017 at 10:54 AM, Mark Kipyegon via kictanet
<span dir="ltr"><<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a><wbr>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
SMS is not a secure implementation of two factor authentication.<br>
<span class="m_6617591784149783904im m_6617591784149783904HOEnZb"><br>
On 30 Jun 2017, at 10:40, "<a href="mailto:kictanet-request@lists.kictanet.or.ke" target="_blank">kictanet-request@lists.kictan<wbr>et.or.ke</a>" <<a href="mailto:kictanet-request@lists.kictanet.or.ke" target="_blank">kictanet-request@lists.kictan<wbr>et.or.ke</a>> wrote:<br>
<br>
<br>
><br>
> A simple 2 Factor Authentication mechanism via SMS would suffice to start<br>
> with.<br>
<br>
</span></blockquote>
</div>
<br>
</div>
</div>
</blockquote>
</span></div>
<div></div>
</div>
<br>______________________________<wbr>_________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" rel="noreferrer" target="_blank">https://lists.kictanet.or.ke/<wbr>mailman/listinfo/kictanet</a><br>
Twitter: <a href="http://twitter.com/kictanet" rel="noreferrer" target="_blank">http://twitter.com/kictanet</a><br>
Facebook: <a href="https://www.facebook.com/KICTANet/" rel="noreferrer" target="_blank">https://www.facebook.com/<wbr>KICTANet/</a><br>
<br>
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/ngigi%40at.co.ke" rel="noreferrer" target="_blank">https://lists.kictanet.or.ke/<wbr>mailman/options/kictanet/<wbr>ngigi%40at.co.ke</a><br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br>
<br></blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div style="border-collapse:collapse;color:rgb(136,136,136);font-family:'Droid Sans',arial,sans-serif;font-size:13px"><div><font face="Calibri"><font size="2"><b>Regards,</b></font></font></div><div><br></div><div><font face="Calibri"><font size="2"><b>Wait</b></font></font><b style="font-size:small;font-family:Calibri">haka Ngigi</b></div></div><div><div><font face="Calibri"><font size="2"><font face="'Droid Sans', arial, sans-serif" color="#888888"><span style="border-collapse:collapse">Chief </span></font><font color="#888888"><span style="border-collapse:collapse">Executive</span></font><font face="'Droid Sans', arial, sans-serif" color="#888888"><span style="border-collapse:collapse"> Officer | </span></font><font style="border-collapse:collapse;font-family:'Droid Sans',arial,sans-serif;font-size:13px" color="#FF6600">Alliance Technologies</font><font face="'Droid Sans', arial, sans-serif" color="#888888"><span style="border-collapse:collapse"> | MCK Nairobi Synod Building</span></font></font></font></div></div><div style="border-collapse:collapse;color:rgb(136,136,136);font-family:'Droid Sans',arial,sans-serif;font-size:13px"><div><font face="Calibri"><font size="2"><span style="font-family:arial"><font face="Calibri"><font size="2">T +254 20 525 0750</font></font></span></font></font><span style="font-family:Calibri,sans-serif;font-size:13px;line-height:14px"> </span><span style="font-family:Calibri,sans-serif;font-size:13px;line-height:14px">|Office Mobile: +254 716 201061 </span><span style="font-family:Calibri,sans-serif;font-size:13px;line-height:14px"></span><span style="font-family:Calibri,sans-serif;font-size:13px;line-height:14px">| </span><span style="font-family:Calibri">M +254 737 811 000<a style="color:rgb(103,117,58)"><br></a></span></div></div><div style="border-collapse:collapse;color:rgb(136,136,136);font-family:'Droid Sans',arial,sans-serif;font-size:13px"><div><span style="font-family:Calibri"><a href="http://www.at.co.ke" target="_blank">www.at.co.ke</a></span></div><div></div></div></div></div></div>
</div>