Re:YubiKey – Making secure login easy
by sjwright on Wednesday June 17, 2015 @10:25PM
(#9736492)
On the upside, Google Authenticator has access to an accurate RTC.
On the downside, your encryption secret is available "in the clear" in the form of a TOTP token that is loaded into the app. You are highly vulnerable during these moments. If an attacker gets a copy of the TOTP token, they can generate the six digit numbers as easily as you.
On the downside, your encryption secret is available "in the clear" in the form of a TOTP token that is loaded into the app. You are highly vulnerable during these moments. If an attacker gets a copy of the TOTP token, they can generate the six digit numbers as easily as you.