5 ms·
You don't need an app to do TOTP. You can do it from a command line if you have the secret.
by ok123456 4y ago
You don't need an app to do TOTP. You can do it from a command line if you have the secret.
- dingaling 4y agoAnd you could do it with pencil and paper if you wanted. If you were very quick at maths. The point is that it places a requirement on the user and interrupts their workflow when they just want to Get Stuff Done. And if it stops working then the burden is on the user to make it work again.
- ok123456 4y agoThat's true of any authentication mechanism. It works until it doesn't. If you wanted to work this into a traditional terminal workflow "generateToken my.host && ssh my.host" TOPT is the least worst way of doing 2FA. I wish I lived in a world where this sort of thing wasn't necessary, but if you have a service where there are accounts that are worth a lot of money in the real world, you need to have some kind of 2FA.
- throwawaaarrgh 4y agoRSA SecurID requires their app for TOTP because they have some secret company seed, or something.
- ok123456 4y agoProbably some sad attempt at keeping their enterprise customers locked in.