ASVS Requirement 6.3.6

Description

Verify that email is not used as either a single-factor or multi-factor authentication mechanism.