News for hackers. Stuff that matters.
Re:NIST declares the age of SMS-based 2-factor authenticatio... by vel0city on Tuesday July 26, 2016 @11:53AM (#12166477)
Yep, right at the top of page 7 of the RFC: https://tools.ietf.org/html/rfc6238

If it accepted the same token more than once, it couldn't possibly be called a "one-time password".

There are no comments on this comment yet.