Freeradius and 2 Factor Authentication
michael at stroeder.com
Sun Jun 5 22:31:33 CEST 2016
Michael Ströder wrote:
> Peter Lambrechtsen wrote:
>> do see there are multiple sites now support TOTP where the enrollment is
>> seamless for end-users. Login to a web site, use Google Authenticator or
>> Authy or any other myriad of TOTP clients to scan the QR code.
> I really wonder why scanning the shared secret as QR code from a screen is
> considered an acceptable security practice. :-/
BTW: And hosted OTP services have access to all the shared secrets...
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 4245 bytes
Desc: S/MIME Cryptographic Signature
More information about the Freeradius-Users