SirLeek

1: Would it be possible to have email or text alerts whenever somebody triggers the authenticator on an unfamiliar device?

2: Could the authenticator also be required to sign into the main site?

3: If somebody is attempting to recover an account, are any notifications or emails sent to the associated email address while the process is ongoing? I ask because I worry about somebody attempting to gain access to my relatively inactive account, and I'm not sure if I'll know about it until it's too late.

What happened to those planned security improvements that were discussed when you disabled JAG? Has anything happened yet?