> If I have a simplistic knock sequence and they sniff it, they can replay it and get access to my https. Somewhat related, I've never set up port knocking but

> If I have a simplistic knock sequence and they sniff it, they can replay it and get access to my https. Somewhat related, I've never set up port knocking but I've been wondering how hard it would be to set up TOTP-flavored port knocking. The basic idea would be to select the pattern of "knocks" the same way TOTP generates a code, I'm not sure how much it would improve things though.