2 ms·NIST does make a difference between the two, which is why it calls it "out of band authenticator."by mtgx 10y agoNIST does make a difference between the two, which is why it calls it "out of band authenticator."