4 ms·
> The device key is secured against duplication by a degree of social trust in the commercial manufacturer TOTP sounds much better. Also doesn't requires "trus
by slezyr 8y ago
> The device key is secured against duplication by a degree of social trust in the commercial manufacturer
TOTP sounds much better. Also doesn't requires "trusted magic hardware"
- peterwwillis 8y agoU2F prevents some vulnerabilities that TOTP alone can't. It's possible to replicate it in software instead of a hardware token, but so far nobody has. So if you're adopting 2FA, suggestion is to use U2F if you can.