The verifier SHALL use accredited encryption and an authenticated secured channel when collecting the OTP so as to supply resistance to eavesdropping and MitM attacks. Time-based mostly OTPs [RFC 6238] SHALL have a defined life span that is decided via the anticipated clock drift — in possibly way — with the authenticator above its life span, a