27 ms·
Do you mean multiple people required to get a single totp code or multiple people authorized to get a single totp code?
by ses1984 7y ago
Do you mean multiple people required to get a single totp code or multiple people authorized to get a single totp code?
- toomuchtodo 7y agoThe former. Think of it as 3FA. Something you know, something you have, and multiple people who need to grant access to that thing you have.
- ses1984 7y agoSure you can bake 3fa into your applcation. Hashicorp vault has something like this to generate a root token. You can split your unseal key according to shamirs secret sharing. You can bring together a specified number of unseal key shards and generate a new root token with them. The app had endpoints to manage all this. You could create your own app with your own endpoints with similar functionality. I don't think there are cryptographic primitives to give you this easily, without some trust logic baked into the app layer.