Online.net - reported as fixed; original findings shown

https://www.online.net/
Recommended Configuration Authenticator
Alternate Configuration 1 SMS
Alternate Configuration 2
Alternate Configuration 3
Account/Password Recovery PR SMS; PR email
Remarks SMS 2FA available for French residents only
Responses

Notified on January 13, 2020.

Reported as fixed (removed SMS account recovery; implemented messages to indicate that the SMS is less secure on 2FA page) on January 31, 2020.

img
2fa_options.png
img
pr_step0.PNG
img
pr_step1.PNG
img
pr_step2.PNG