4 ms·
Then that's not TOTP https://datatracker.ietf.org/doc/html/rfc6238 https://datatracker.ietf.org/doc/html/rfc6238 but something different. Do you know how it is
by madars 5y ago
Then that's not TOTP https://datatracker.ietf.org/doc/html/rfc6238 https://datatracker.ietf.org/doc/html/rfc6238 but something different. Do you know how it is called and which products support it? I'd love to read up about it!
- encryptluks2 5y agoYes, it is TOTP: https://github.com/tadfisher/pass-otp https://github.com/tadfisher/pass-otp
- valid_username 5y agoBitwarden has TOTP support in paid plan. And it works with browser extension which recognises domains.
- AkshitGarg 5y agoIt certainly recognizes the domain, but thats more of a convenience feature than a security feature. Nothing is stopping you from putting your example.com code into legit-example.com manually. Sure the extension won't do it automatically, but if the user is convinced to put the password into the fake website, user could also put in the TOTP code