Viktor Dukhovni wrote:-

>I care to keep my account indefinitely, and current second factors don't
>in my view clearly possess demonstrate the requisite longevity.

I also wish to keep accounts/credentials indefinately, and think I have
concluded that this can be adequately achieved using TOTP as well as unique
email address/password combinations for each account.

TOTP is based on a shared secret which is (depending upon TOTP client)
straightford to extract and retain securely for the long term.

Does anyone see any flaw in this approach, or in the longevity of TOTP?

Best wishes,
Matthew
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Reply via email to