The verifier SHALL use authorized encryption and an authenticated protected channel when collecting the OTP so that you can deliver resistance to eavesdropping and MitM assaults. Time-centered OTPs [RFC 6238] SHALL have a defined lifetime that is set via the expected clock drift — in possibly path — of the authenticator above its life time, fur… Read More