WebApp Sec mailing list archives

Re: Proposal to anti-phishing


From: Frank Knobbe <frank () knobbe us>
Date: Sun, 16 Jan 2005 14:31:50 -0600

On Fri, 2005-01-14 at 23:58 +0100, Florian Weimer wrote:
The solution is based in a hardware token that is
delivered to every customer. 

It's acceptable neither to customers nor to banks.  These days,
zero-setup online banking is an absolute must.

Florian,

perhaps that is true for regular consumer-grade banking clients. But for
high dollar transaction processing, zero-setup online banking, which
lack any type of security controls, is not acceptable -- neither to the
account owner nor the banks.

Don't throw all banking clients into the same bucket, I mean, category.

Regards,
Frank

Attachment: signature.asc
Description: This is a digitally signed message part


Current thread: