The verifier SHALL use permitted encryption and an authenticated safeguarded channel when collecting the OTP as a way to provide resistance to eavesdropping and MitM attacks. Time-centered OTPs [RFC 6238] SHALL have an outlined life time that is determined by the anticipated clock drift — in both way — from https://johnk219bww1.wikiexcerpt.com/user