[pure-ftpd] TOTP for Pureftpd

Hello

I got a few requests about securing FTP access.

I just though about the use of a Time based One Time Password (TOTP) 
with pureftpd.

There does not seem to be an existing implementation for TOTP with 
pureftpd, so I thought that I'ld suggest it.
I know that it is possible to develop an Authentication Module for 
pureftpd that does not have to be part of the official distribution, but 
I am not going to do that just yet.

If a TOTP implementation would be developped for PUREFTPD, I would 
implement it such that the password and the TOTP must be submitted 
together.  TOTP passwords are designed for two-factor authentication - 
using a TOTP alone opens the door to bruteforce (I image that an 
attacker could just send the same  number all the time untill it matches 
the current time).
So the password to be submitted would be something like 
"FIXED_SECRET-TOTP"

Kind regards

Mario


-- 
GDPR:
Personal data is provided only for this communication.
I refuse unsollicited subscriptions to mailing lists
and I refuse commercial use of this personal data.