3 ms·
On the upside, Google Authenticator has access to an accurate RTC. On the downside, your encryption secret is available "in the clear" in the form of a TOTP to
by sjwright 11y ago
On the upside, Google Authenticator has access to an accurate RTC.
On the downside, your encryption secret is available "in the clear" in the form of a TOTP token that is loaded into the app. You are highly vulnerable during these moments. If an attacker gets a copy of the TOTP token, they can generate the six digit numbers as easily as you.