Zerify Inc (ZRFY)

[Big Papa bear]

Answer Problem

Facts

Out-of-Band Authentication
Out-of-band (OOB) refers to authentication processes where authentication methods are conveyed through different networks or channels.
Where authentication factors are conveyed through a single device/channel—for example, entering credentials via a device that also receives, stores, or generates a software token—a malicious user who has established control of the device has the ability to capture both authentication factors.
Transmission of a one-time password (OTP) to a smartphone has traditionally been considered an effective out-of-band method. However, if the same phone is then used to submit the OTP—for example, via a web browser—the effectiveness of the OTP as a secondary factor is effectively nullified.
Out-of-band conveyance of authentication mechanisms is an additional control that can enhance the level of assurance for multi-factor authentication. In lieu of the ability to use out-of-band communication, the authentication process should establish controls to guarantee that the individual attempting to use the authentication is, in fact, the legitimate user in possession of the authentication factor.


So logic sates you would need two passwords to be in compliance with PTC