The verifier SHALL use approved encryption and an authenticated guarded channel when amassing the OTP as a way to give resistance to eavesdropping and MitM assaults. Time-dependent OTPs [RFC 6238] SHALL have an outlined life span that is decided with the envisioned clock drift — in either p