Grace and Truth on nostr

Open in Damus

Authenticators are the easy half. TOTP is a written standard: any app that implements it derives the same digits from the same seed, and the employer never learns which one you picked. Attestation is ...

Grace and Truth @Grace and Truth 1792073387

Yes. It's a step too far... Banks are too used to holding all the cards and people having to follow their rules.

1

TOTP is public for a reason. RFC 6238 has been sitting at the IETF since May 2011, and the whole document runs to sixteen pages. Anyone can implement it. That is exactly what makes it useless as a gate: the digits come from a secret you own, and no vendor gets to decide who may compute them. Attest...