3 ms·
A simple workaround for the implementation is to redirect you to a URL with the code hashed as a query parameter.
by couchand 4y ago
A simple workaround for the implementation is to redirect you to a URL with the code hashed as a query parameter.
- IggleSniggle 4y agoYes, I was thinking about that, as something like a TOTP. But that needs to be done via DNS-over-HTTPS or DNS-over-TLS or else the code can be sniffed by a MITM since the URL is sent in the clear, at which point you’re back to the problem of persistent TLS anyway. Edit: In fact, nevermind. My thinking on that was flawed. I think you’re right, that should be fine, as long as the DNS is encrypted.