OWASPASVS 5.0 requirement
ASVS-V6.5.8 Time-based one-time passwords (totps) are checked based on a time source from a trusted service and not from an untrusted or client…
- Standard
- OWASP ASVS 5.0
- Chapter
- V6 Authentication
- Section
- V6.5 General Multi-factor authentication requirements
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that time-based one-time passwords (TOTPs) are checked based on a time source from a trusted service and not from an untrusted or client provided time.