From: Neil J. McRae (no email)
Date: Wed Jan 03 2007 - 09:49:04 EST
> SecureID might be helpful if you want to differentiate your product
> between automatic and manual use, but it doesn't do anything to
> authenticate the party you are relaying information to. But it's
> useless in a phishing context. If you want a token solution, at least
> use something that factors in transaction-related data.
Florian,
Sorry we didn't' specifically recommend any solution simply that
they need to look are more secure authentication systems to
minimize phishing issues. As you note even the most secure systems
can be beaten.
Neil.
|
|
|