I also noticed that if I am using a wrong login/password/OTP deliberately, I get an immediate reply from kraken.com ("invalid password"), so no timeout.
Only when I am supplying a correct login/password/OTP, I run into the timeout. So I guess the problem starts "behind" the login.