The verifier SHALL use approved encryption and an authenticated guarded channel when accumulating the OTP so that you can provide resistance to eavesdropping and MitM assaults. Time-dependent OTPs [RFC 6238] SHALL have a defined life time that is determined because of the envisioned clock drift — in either path — in the authenticator over its l