3 ms·
Because those OTPs can be intercepted by any MITM unless you are using on-device 2FA generated by an app.
by navigate8310 3mo ago
Because those OTPs can be intercepted by any MITM unless you are using on-device 2FA generated by an app.
- xk3 3mo ago> intercepted by any MITM Most things are... even SSH is Trust-on-First-Use. You can really only verify out of band. OTP is quite a bit better than CC or bank account numbers... assuming the OTP is only restricting use (and not giving access to view or modify other account information, etc)