Re: one-time password (OTP) authentication

[Devdas Bhagat <devdas () dvb homelinux org>]

On 20/06/05 13:21 -0700, maburns () safenet-inc com wrote:
<snip>
> Two-factor authentication is   1) "something physical only the user has" -
> like an USB Key which is the same as a ATM card and 2) a "pin # that only
> user knows" . This is not difficult to implement there are SDK's available

A "something the user has" plugged into the client makes it something
the attacker has. Always assume that the client is compromised.

Devdas Bhagat