3 ms·
Then generate a session id and invalidate the URI after first use.
by supergreg 9y ago
Then generate a session id and invalidate the URI after first use.
- pja 9y agoIt’s not a URI. The google-authenticator pam library generates an image that encodes the secret which gets echoed to the terminal as a QR-code. No internet access required - just a camera on your phone to image the code. If you can take a photo of the code & re-use it, then you can initialise multiple phones with the same secret.