The client has the private key, the server has the corresponding public key in its authorized keys file.

The server is vulnerable to the private key getting stolen from the client.

Not perfect for me, I was also wondering if it would be in this post.

I find the scrolling in the sms display wack, and the copy otp button doesn’t work (just enabled the log follow workaround, so we’ll see), and the right click menu on the system tray icon goes off screen the first try.