[SOLVED] new v2 TOTP recording

[TwiX]

Hi,

Seems that latest pve7.1 changes the way we record totp on /etc/pve/priv/tfa.cfg.

I have a problem with that because the 'Secret' is now showed

V2 :


V1:


V2 method allows root to know all secrets keys for all users. Some of them use the same TOTP secret for several services.

Fortunately, V1 is still valid

 

[fabian]

the root user could always read the TOTP secret (previously it was just base64 encoded), that's how TOTP works (via a shared secret). that's why you get a new one for each service and DON'T share it..

 

[TwiX]

Thanks...Understood