Freeradius and 2 Factor Authentication

[Michael Ströder]

Peter Lambrechtsen wrote:
> do see there are multiple sites now support TOTP where the enrollment is
> seamless for end-users. Login to a web site, use Google Authenticator or
> Authy or any other myriad of TOTP clients to scan the QR code.

I really wonder why scanning the shared secret as QR code from a screen is
considered an acceptable security practice. :-/

Ciao, Michael.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20160605/e2c5129d/attachment.bin>