Switching entirely to time-based tokens brings its own set of potential problems but we may consider 'adding' time-based clients as an option in the future. I think we could consider displaying some kind of warning when the user first sets up a device to avoid PEBKACs but further increases in the drift window are probably a bad idea for the reasons Selene has explained.
Switching entirely to time-based tokens brings its own set of potential problems but we may consider 'adding' time-based clients as an option in the future. I think we could consider displaying some kind of warning when the user first sets up a device to avoid PEBKACs but further increases in the drift window are probably a bad idea for the reasons Selene has explained.