[saag] Errata 6702 - Hotp, Errata 7651 also Hotp
Michael StJohns <[email protected]>
| Newsgroups | gmane.ietf.saag |
|---|---|
| Message-ID | <[email protected]> |
https://www.rfc-editor.org/errata/eid7651
https://www.rfc-editor.org/errata/eid6702
RFC 4226 <https://www.rfc-editor.org/rfc/rfc4226>, "HOTP: An
HMAC-Based One-Time Password Algorithm", December 2005
The third one for this document. I didn't realize there were 4 of
these. This is also the answer for 4.
Recommend: Add an Editors note: "This document has at least 3 errors
of specification which would make any implementation based on this
document suspect. We do not recommend implementation against this RFC
at this time. Please refer to the associated errata and any public code
repositories and other public discussion forums referencing this
protocol for information on deployed code referenced as 'HOTP'".
Yeah, I know it's not one of the normal values, but as far as I can tell
from the reporters and their references, this document is fatally broken
and really requires a re-write/re-verification.
I'm not even sure historic or obsolete is a correct path for it.
Accepting either of these last two errata would require accepting the
source code as the source of truth - but it's unclear whether that the
right approach.
Mike
_______________________________________________
saag mailing list -- [email protected]
To unsubscribe send an email to [email protected]