The verifier SHALL use permitted encryption and an authenticated shielded channel when gathering the OTP so as to give resistance to eavesdropping and MitM assaults. Time-centered OTPs [RFC 6238] SHALL have a defined life span that is determined by the predicted clock drift — in possibly way — from the authenticator about its life span, additio