-
**Describe the bug**
The TOTP functionality of MacPass 0.8.1 (26030) does not work correctly. I can
* Create a new TOTP token
* Provide the shared secret
* Change the settings as needed
* See t…
-
**Is your feature request related to a problem?**
> I think a relatively secure operation and maintenance tool should support at least one MFA verification method. This tool interface looks logical, …
-
RFC 4226 and RFC 6238 both define test routines. This issue adds those tests using [unittest](https://docs.python.org/3/library/unittest.html)
- [ ] Add test.py
- [ ] Populate test.py with RFC 422…
-
Description on https://openrepos.net/content/slava/foil-auth says:
> Only time-based (TOTP) passwords are supported in this version.
and https://github.com/monich/harbour-foilauth says:
> is …
ehdis updated
3 years ago
-
**Suggestion/Request for discussion:**
According to the discussion in Issue #66 and the [mentioned assessment of the DESIRE proposal](https://github.com/DP-3T/documents/issues/66#issuecomment-6281523…
-
[Rob Winch](https://jira.spring.io/secure/ViewProfile.jspa?name=rwinch) (Migrated from [SEC-2390](https://jira.spring.io/browse/SEC-2390?redirect=false)) said:
Include support for HMAC-Based One-ti…
-
Please add two-factor authentication to bitcard.org. HOTP and TOTP would be preferred. HOTP is defined in [RFC 4226](https://www.ietf.org/rfc/rfc4226.txt). TOTP is defined in [RFC 6238](https://www.ie…
-
Code once verified must not be accepted again as per RFC 6238. While not absolutely critical, this helps is cases where the code (and password) were observed by third party "over shoulder".
vilda updated
11 months ago
-
Implement two factor authentication based on RFC 6238
Please include the following features:
- Fallback via mail or SMS
- Web management of token clients
-
I stumbled upon a site that let me choose TOTP algorithm between SHA1, SHA256 or SHA512. Only SHA1 worked.
According to https://security.stackexchange.com/a/45906, using HMAC-SHA-256 or HMAC-SHA-5…