Conclusion

In the final analysis, there are no good or bad strong authentication methods. What should be definitively banned is weak authentication using static IDs and passwords, when the security stakes are high. What should be avoided is offering average authentication solutions (e.g. 2-factor authentication via SMS) and passing them off as strong authentication. It is urgent that certain Internet players use their budget to deploy and implement genuine strong authentication solutions, rather than spending it on communication to extol the hypothetical security of weak or average solutions.

The choice of a strong authentication method must first and foremost depend on its use and context. What's good for controlling direct access to equipment or premises is not necessarily good for controlling remote access over a network such as the Internet. And vice versa. The level of...