WebApp Sec mailing list archives

Cookies as the second factor


From: "Jeff Robertson" <jeff.robertson () digitalinsight com>
Date: Tue, 18 Jul 2006 08:45:12 -0400

It seems like it's been mentioned on here before, that a number of "two
factor" or "multi factor" authentication schemes actually use a cookie
as the second factor.

Anyone here have specific experience with such solutions, or opinions
about how much security they add to a system?

-------------------------------------------------------------------------
Sponsored by: Watchfire

AppScan 6.5 is now available! New features for Web Services Testing,
Advanced Automated Capabilities for Penetration Testers, PCI Compliance
Reporting, Token Analysis, Authentication testing, Automated JavaScript
execution and much more.
Download a Free Trial of AppScan today!

https://www.watchfire.com/securearea/appscancamp.aspx?id=70150000000CYkc
-------------------------------------------------------------------------


Current thread: