Re: Password alternatives

[Adam Mooz <adam.mooz () gmail com>]

Hey Wali,

You could try compiling a series of 'password best practices' of fortune 500 companies, afaik execs love that kind of 
stuff.  You could also try a live demonstration of 'why password complexity' is important.  If they still don't bit 
then RSA tokens may be your best bet.  Biometrics, if it was a really good Biometics, would only 'inconvienence' them 
greater, now they have to physically be present to sign in, which with the password sharing going on, sounds like it'd 
be a no go.

Sorry for the horrible wording, haven't had my morning coffee yet.  

-----------------------------------------------------------------
Adam Mooz
Adam.Mooz () gmail com
http://www.AdamMooz.com

On 2010-03-26, at 1:18 PM, WALI wrote:

> Hi guys
>
> The recent attempt to roll out password complexity within our AD domain has not been well recieved by higher / 
> executive management. These guys have a habit of sharing their passwords with their PAs and secretaries and now they 
> are cribbing when they need to change their password every 90 days.
>
> What are best and most workable alternatives? Biometrics, RSA tokens? Any thing else which you guys have implemented 
> with relative ease?
>
> Pls advise! 
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
> how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
> purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
> set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------