Security Basics mailing list archives

Re: secure password communication


From: Ansgar Wiechers <bugtraq () planetcobalt net>
Date: Mon, 22 Dec 2008 17:05:18 +0100

On 2008-12-21 sfmailsbm () gmail com wrote:
we need to communicate first-time application passwords to remote
users; wanted to know what are the practices implemented out there to
ensure that password is communicated in a secure, fast, cost-effective
way

encrypted mails is not feasible for the time being, printing PIN
Mailers and sending by post will be too lengthy

AFAICS the only other option is to call them by phone.

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq


Current thread: