Merge pull request #3 from ktw/master

Small correction to README.md
This commit is contained in:
Sebastian 2016-07-14 16:01:43 +02:00 committed by GitHub
commit cc1b87fe43

View File

@ -33,8 +33,8 @@ This package implements the RFC 6238 OATH-TOTP algorithm;
### Storing Keys
> **The key is created using Golang crypto random function. It's a secret key and therefore**
> it needs to be protected against unauthorized access. The key cannot be leaked, otherwise the security is complitely compromised.
> The key is presented to the user in a form of QR Code. Once scanned the key should be revealed again.
> it needs to be protected against unauthorized access. The key cannot be leaked, otherwise the security is completely compromised.
> The key is presented to the user in a form of QR Code. Once scanned the key should never be revealed again.
> In addition when the QR cide is shared with the client for scanning, the connection used must be secured.
The `totp` struct can be easily serialized using the `ToBytes()` function.