The verifier SHALL use authorised encryption and an authenticated guarded channel when collecting the OTP in an effort to deliver resistance to eavesdropping and MitM assaults. Time-primarily based OTPs [RFC 6238] SHALL have an outlined lifetime that is decided because of the predicted clock drift &