8 ms·
Can you elaborate on the threat model here? Having the second factor be stored on the same device you're entering your password on, protected by a password (ano
by akerl_ 9y ago
Can you elaborate on the threat model here? Having the second factor be stored on the same device you're entering your password on, protected by a password (another example of something-you-know), seems to counteract most of the benefits of having TOTP.
- stephenr 9y agoI think its largely about protection from remote attacks. Its a kind of "only allow logins from this device". This doesnt solve all problems definitely, but for some of us there is zero practical danger from our location and much higher danger from geographically remote locations