RE: Proposal to anti-phishing

["WebAppSecurity [Technicalinfo.net]" <webappsec () technicalinfo net>]

That's two-factor you're talking about - not two-phased

> -----Original Message-----
> From: Don Tuer [mailto:don.tuer () cgi com] 
> Sent: 14 January 2005 15:28
> To: 'Rafael San Miguel'; webappsec () securityfocus com
> Cc: Enrique.Diez () dvc es
> Subject: RE: Proposal to anti-phishing
>
> Two phased authentication is good for security but some 
> obvious disadvantages include:
>
>       - Cost of hardware tokens
>       - Cost of distribution
>       - Cost of managing hardware
>       - Complexity and user training
>
>       Also will the user need to return their token for 
> replacement if they forget the PIN?
>
> Thanks
> Don