The verifier SHALL use accepted encryption and an authenticated safeguarded channel when amassing the OTP so as to provide resistance to eavesdropping and MitM attacks. Time-centered OTPs [RFC 6238] SHALL have a defined lifetime that is set via the anticipated clock drift — in possibly course — on the authenticator about its lifetime, furthermo