The verifier SHALL use accredited encryption and an authenticated secured channel when collecting the OTP so as to supply resistance to eavesdropping and MitM attacks. Time-based mostly OTPs [RFC 6238] SHALL have a defined life span that is decided via the anticipated clock drift — in possibly way —