4 ms·
TOTP codes are straightforward to bootstrap. It's not rocket science.
by bpicolo 9y ago
TOTP codes are straightforward to bootstrap. It's not rocket science.
- StavrosK 9y agoI agree, I wrote an implementation in an afternoon for work, and that was back when there were no libraries to do this for me.
- koolba 9y agoAt scale the cost of implementing a feature as wide ranging as 2FA is well beyond the tech cost. A basic TOTP implementation can be coded from scratch in an afternoon[1]. The real cost is testing to make sure a code change like this doesn't break existing users and estimating the additional support overhead of dealing with users that lose their two-factor devices. [1] Seriously the RFC is very straightforward and readable: https://tools.ietf.org/html/rfc6238 https://tools.ietf.org/html/rfc6238