3 ms·
Yes, it starts its life as a password. After that, it is never communicated ever again, and therefore, after the initial exchange, it's something you have. It
by tremon 5y ago
Yes, it starts its life as a password. After that, it is never communicated ever again, and therefore, after the initial exchange, it's something you have.
It seems to me you are ascribing properties to "something you have" that aren't warranted. The "something you have" needs to prove you were party to the initial exchange, not necessarily that you were the only one present -- that's why we use two factors, and not only TOTP.
- thaumasiotes 5y agoI can't follow what you're trying to say. > The "something you have" needs to prove you were party to the initial exchange This is not something that can be proven at all. Accordingly, proving it is not a goal. Anything that can be had can also be transferred. Your delegated agent's login attempt is just as valid as yours is.