Re: 2-factor auth for all

["Saqib Ali" <docbook.xml () gmail com>]

> 2. Without mutual authentication, phishing attacks will still occur.

Excellent point! I totally agree with this. In fact I covered this
topic in my blog in September with reference to a study done by a TPM
manufacturer. See:
http://www.xml-dev.com/blog/index.php?action=viewtopic&id=243

--
Saqib Ali, CISSP, ISSAP
http://www.full-disk-encryption.net

-------------------------------------------------------------------------
Sponsored by: Watchfire

Hackers continue to add billions to the cost of doing business online 
despite security executives' efforts to prevent malicious attacks. This 
whitepaper identifies the most common methods of attacks that we have 
seen, and outlines a guideline for developing secure web applications. 
Download our The Twelve Most Common Application-level Hack Attacks 
whitepaper today!

https://www.watchfire.com/securearea/whitepapers.aspx?id=701500000008YTi
--------------------------------------------------------------------------