Comment Comment by rusbus It occurred to be that with 2 factor authentication, the server needs to hold on the the secret key. If that is leaked, the 2 factor is useless.[1]Contrast this with salted hashing where leaking the hash doesn't directly lead to compromise.Could you use a blind signature to construct a rotating code 2 factor scheme where leaking the server credential doesn't lead to complete compromise?https://rcoh.me/posts/two-factor-auth parent rusbus 8 years ago
Contrast this with salted hashing where leaking the hash doesn't directly lead to compromise.
Could you use a blind signature to construct a rotating code 2 factor scheme where leaking the server credential doesn't lead to complete compromise?
https://rcoh.me/posts/two-factor-auth