The verifier SHALL use approved encryption and an authenticated protected channel when amassing the OTP so that you can give resistance to eavesdropping and MitM assaults. Time-centered OTPs [RFC 6238] SHALL have a defined lifetime that is determined via the anticipated clock drift — in eit