I'd be interested in hearing why you prefer OTP over asymmetric crypto...because the way I see it, one huge problem with OTP is that the authenticator needs to

I'd be interested in hearing why you prefer OTP over asymmetric crypto...because the way I see it, one huge problem with OTP is that the authenticator needs to know the 'shared secret' on the device...Smart cards and similar devices using public key encryption have no such requirement. I guess one benefit of OTP tokens is that they don't need to be physically connected to the computer (hence no software to install period), but when it comes right down to it, they're really not much better than just username/password when it comes to phishing or real-time keylogging attacks...not to mention the fact that you have to type that huge number /in addition to/ your regular credentials...