Terence Eden personal blog

Towards a test suite for TOTP codes

Because I'm a massive nerd, I actually try to read specification documents. As I've ranted ad nauseam before, the current TOTP spec is irresponsibly obsolete. The three major implementations of the spec - Google, Apple, and Yubico - all subtly disagree on how it should be implemented. Every other MFA app has their own…
Points
107
HN comments
38
Submissions
1
Cited by
0 commenters

Security & PrivacySoftware Engineering2025

On Hacker News

SubmittedTitle on HNPointsComments
Mar 2, 2025Towards a test suite for TOTP codes by ColinWright10738

More from Terence Eden

All 143 posts →

Related posts from the same era