Re:Google: Security Keys Neutralized Employee Phishing
by Dylan16807 on Tuesday July 24, 2018 @09:52PM
(#17606373)
Ratchets serve multiple purposes, but they're fundamentally about having a state on both ends that ticks forward per use. TOTP tokens are stateless and "ratchet" is not the right word for only allowing one login per 30 seconds.
[ Parent
| on HN ]
There are no comments on this comment yet.