Re: Putting OPIE to rest

From: Dag-Erling_Smørgrav <des_at_des.no>
Date: Thu, 15 Sep 2022 23:38:35 UTC
grarpamp <grarpamp@gmail.com> writes:
> OPIE is the only PAM that allows printing out the future
> secure tokens. Old school, secure, it just works.
>
> HOTP requires hardware, TOTP requires time,
> neither are printable, both of those require some other
> [hackable] hw/sw device that costs $$$ money, and
> those devices all have different threat/failure/admin models
> than simple paper.

Neither HOTP nor TOTP require dedicated devices.  HOTP codes are
sequential and can be pre-generated and printed if that's what you
prefer.

DES
-- 
Dag-Erling Smørgrav - des@des.no