OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: 2-factor auth for all

From: Saqib Ali (docbook.xmlgmail.com)
Date: Tue Oct 24 2006 - 09:51:44 CDT


> 2. Without mutual authentication, phishing attacks will still occur.

Excellent point! I totally agree with this. In fact I covered this
topic in my blog in September with reference to a study done by a TPM
manufacturer. See:
http://www.xml-dev.com/blog/index.php?action=viewtopic&id=243

--
Saqib Ali, CISSP, ISSAP
http://www.full-disk-encryption.net

-------------------------------------------------------------------------
Sponsored by: Watchfire

Hackers continue to add billions to the cost of doing business online
despite security executives' efforts to prevent malicious attacks. This
whitepaper identifies the most common methods of attacks that we have
seen, and outlines a guideline for developing secure web applications.
Download our The Twelve Most Common Application-level Hack Attacks
whitepaper today!

https://www.watchfire.com/securearea/whitepapers.aspx?id=701500000008YTi
--------------------------------------------------------------------------