「GeForce NOW Powered by SoftBank」サービス提供終了のご案内|GeForce NOW Powered by SoftBank
https://cloudgaming.mb.softbank.jp/news/20240109/index.html
「GeForce NOW Powered by SoftBank」サービス提供終了のご案内|GeForce NOW Powered by SoftBank
https://cloudgaming.mb.softbank.jp/news/20240109/index.html
このアカウントは、notestockで公開設定になっていません。
TOTPがベースにしてるHOTPで6桁か8桁にしてね、7桁は脆弱だよって言ってるので大体桁数の指定がされてるもんだと思っていいよ
RFC 6238にはTOTPの桁数は規定されていないし参考の実装は8桁を生成しているように見える🤔
TOTP: Time-Based One-Time Password Algorithm
https://datatracker.ietf.org/doc/html/rfc6238
This limit can be set both forward and backward from the calculated time step on receipt of the OTP value. If the time step is 30 seconds as recommended, and the validator is set to only accept two time steps backward, then the maximum elapsed time drift would be around 89 seconds, i.e., 29 seconds in the calculated time step and 60 seconds for two backward time steps.
This would mean the validator could perform a validation against the current time and then two further validations for each backward step (for a total of 3 validations). Upon successful validation, the validation server can record the detected clock drift for the token in terms of the number of time steps. When a new OTP is received after this step, the validator can validate the OTP with the current timestamp adjusted with the recorded number of time-step clock drifts for the token.
RFC 6238: TOTP: Time-Based One-Time Password Algorithm https://www.rfc-editor.org/rfc/rfc6238#section-6
このアカウントは、notestockで公開設定になっていません。