Security Basics mailing list archives
RE: Password communication
From: "Sinha, Amitabh (Amit)" <Amit.Sinha () lsi com>
Date: Mon, 7 Jan 2008 10:46:08 -0500
Use your phone audix capabilities. When a user calls for password reset have the helpdesk leave the temporary password on their office phone and send an informational email that their password was reset (without specifying the temp password) as per their phone request. A valid user will retrieve their temporary password by accessing the audix for which they would have to enter their audix/voicemail password. Best of Luck, Amit Sinha MS Computer Science (INFOSEC) Global WAN & IT Security LSI Corporation -----Original Message----- From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of pepsdiaz () gmail com Sent: Thursday, January 03, 2008 3:09 AM To: security-basics () securityfocus com Subject: Password communication Dear all, We are trying to implement a password policy in our Organization and we have some doubts when distributing the password to all the employees. I would like to know which is the best way to communicate the new password when the user block/forgot his password. 1) We donĀ“t want to use an envelope because it takes long time. 2) Telephone is insecure, how to authenticate the user? 3) email is also insecure... 4) PKI... expensive? Thanks to all in advance. This electronic transmission is intended for the addressee (s) named above. It contains information that is privileged, confidential, or otherwise protected from use and disclosure. If you are not the intended recipient you are hereby notified that any review, disclosure, copy, or dissemination of this transmission or the taking of any action in reliance on its contents, or other use is strictly prohibited. If you have received this transmission in error, please notify the sender that this message was received in error and then delete this message. Thank you.
Current thread:
- Password communication pepsdiaz (Jan 03)
- RE: Password communication Nick Duda (Jan 03)
- RE: Password communication Sam Hansen (Jan 03)
- RE: Password communication Nick Vaernhoej (Jan 03)
- RE: Password communication Petter Bruland (Jan 03)
- Re: Password communication Dante Signal31 (Jan 04)
- RE: Password communication Sinha, Amitabh (Amit) (Jan 07)
- RE: Password communication Petter Bruland (Jan 03)
- Re: Password communication Nikhil Wagholikar (Jan 03)
- RE: Password communication Ronny Roethof (Jan 04)
- Re: Password communication mgk.mailing (Jan 04)
- Re: Password communication Gleb Paharenko (Jan 07)
- Re: Password communication Serg B (Jan 07)
- RE: Password communication Worrell, Brian (Jan 08)
- Message not available
- RE: Password communication Worrell, Brian (Jan 08)
- Re: Password communication Gleb Paharenko (Jan 07)
- RE: Password communication Nick Duda (Jan 03)
- RE: Password communication Worrell, Brian (Jan 04)