4 ms·
I wonder if one could combine port knocking and TOTP in some way, so the sequence is determined by the TOTP? (Security is not my thing; don't judge me!)
by squigz 3y ago
I wonder if one could combine port knocking and TOTP in some way, so the sequence is determined by the TOTP?
(Security is not my thing; don't judge me!)
- noman-land 3y agoWas just having the same thought reading this thread.
- ametrau 3y agoYeah you could but wouldn’t it defeat the purpose of being basically a secret knock before you can give the password? The password should be the ssh password.
- cesnja 3y agoThis would be just to allow you to connect to the server. If there was a vulnerable sshd on port 22, an adversary would have to know the port knocking sequence to connect to sshd and run the exploit.