3 ms·
Another name of OTP in E-Mails are capability URLs and they are used quite frequently. https://www.w3.org/TR/capability-urls/ https://www.w3.org/TR/capability-
by raxxorrax 6y ago
Another name of OTP in E-Mails are capability URLs and they are used quite frequently.
https://www.w3.org/TR/capability-urls/ https://www.w3.org/TR/capability-urls/
There are some problems though and the authentication could be called weak.
Problems is that URLs aren't regarded as secret and the irrational tendency to log everything doesn't help, as these OTP will be visible after a while.
So these OTP have to be invalidated at some point as they tend to become revealed. If expiration is necessary, you still need some form of auth to regain access.