3 ms·
The basic premise is in https://datatracker.ietf.org/doc/html/rfc6238 https://datatracker.ietf.org/doc/html/rfc6238, although today I'd use SHA-256, not SHA-1,
by deathanatos 3y ago
The basic premise is in https://datatracker.ietf.org/doc/html/rfc6238 https://datatracker.ietf.org/doc/html/rfc6238, although today I'd use SHA-256, not SHA-1, if possible.
But I'd disfavor TOTP over hardware tokens that can sign explicit requests.