Blog Reactions
Digital Trends: SSL Web Security Protocol Compromised by Researchers
Betanews: Indiscreet tweet trips awareness of Web SSL vulnerability
| 2要素とは、知っていること、持っていること。東南アジアの一部は国策でネックレス現状が進んでいるが、利用者からするとサービス毎にトークンは持ちたくない。"Tokenless Two Factor Authentication" ( http://bit.ly/1Mumtp ) 11/3/2009 |
| RT @itsecuritynz: Free Two-Factor Authentication for up to 25 users using just a telephone http://ow.ly/yn0E 11/2/2009 |
SSL Web Security Protocol Compromised by Researchers
Digital Trends —
... Two researchers with PhoneFactor say they've found a serious flaw with SSL security - the technology used to protect most online transactions. Two researchers with PhoneFactor , a company that offers two-factor authentication services, say that thay have uncovered a ...
Indiscreet tweet trips awareness of Web SSL vulnerability
Betanews —
... The problem is essentially a repeat of what developers of TLS and its parent protocol, Secure Sockets Layer (SSL), have dealt with a handful of times in the past: the potential of man-in-the-middle attacks by malicious servers that can pass themselves off as security authenticators. As the team from wireless security service provider PhoneFactor discovered last August, it was possible using both Microsoft IIS 7.0 and Apache httpd Web servers to demonstrate a situation where a false TLS server authenticates itself to a genuine Web client, then authenticates itself ...
