Re: password vs pass-phrase

[Eric Case <ecase () EMAIL ARIZONA EDU>]

> -----Original Message-----
> From: The EDUCAUSE Security Constituent Group Listserv
> [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Russell Fulton
> Sent: Friday, March 19, 2010 12:54 AM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: Re: [SECURITY] password vs pass-phrase
>
> On 19/03/2010, at 1:51 PM, Eric Case wrote:
> > Why not some of the smart phone stuff like the VeriSign's VIP for
> Mobile
> > <http://www.verisign.com/authentication/two-factor-
> authentication/vip-access
> > -for-mobile>?  No reader to buy, no card to purchase.
>
> Based on SMS?

No.  It's an app that runs on the phone.  Basically the app turns your phone
into a key fob.
-Eric



Eric Case, CISSP
eric (at) ericcase (dot) com
http://www.linkedin.com/in/ericcase