4 ms·
The TOTP spec (rfc6238) allows up to 10 digits or 10 billion unique values, a bit bigger than IPv4's space. Running anything like fail2ban on IP address misses
by AaronFriel 5y ago
The TOTP spec (rfc6238) allows up to 10 digits or 10 billion unique values, a bit bigger than IPv4's space.
Running anything like fail2ban on IP address misses would stop brute forcing in its tracks.
- kadoban 5y agoBoth good ideas. None of this fixes even a passive mitm attack, but it's still better.