4 ms·
Neither is the key for a ssl cert generated on the device? In fact, with qr enrollment the 2fa approach does transmit/expose the secret (probably over https, bu
by e12e 5y ago
Neither is the key for a ssl cert generated on the device? In fact, with qr enrollment the 2fa approach does transmit/expose the secret (probably over https, but still).
- EB66 5y agoTrue, you can't generate a QR code without transmitting the TOTP secret/seed in some fashion, but it's a one-time event that's typically done over HTTPS like you suggested.