Re: Putting OPIE to rest
- Reply: grarpamp : "Re: Putting OPIE to rest"
- In reply to: grarpamp : "Re: Putting OPIE to rest"
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Thu, 15 Sep 2022 23:38:35 UTC
grarpamp <grarpamp@gmail.com> writes: > OPIE is the only PAM that allows printing out the future > secure tokens. Old school, secure, it just works. > > HOTP requires hardware, TOTP requires time, > neither are printable, both of those require some other > [hackable] hw/sw device that costs $$$ money, and > those devices all have different threat/failure/admin models > than simple paper. Neither HOTP nor TOTP require dedicated devices. HOTP codes are sequential and can be pre-generated and printed if that's what you prefer. DES -- Dag-Erling Smørgrav - des@des.no