stargeek
spfmilter 1.0.4spfmilter 1.0.4spfmilter 1.0.4 07/02/2004 10:00 AM A Sender Policy Framework (SPF) milter for Sendmail. This is a GrokNews Entry: (what is grok?)spfmilter 1.0.4Grok Headline matches for spfmilter 1.0.4spfmilter 1.0.6spfmilter 1.0.6 07/14/2004 01:24 PM A Sender Policy Framework (SPF) milter for Sendmail. Grok Description matches for spfmilter 1.0.4 GrokA matches for spfmilter 1.0.4 SSH RSA/DSA authentication via the GUISSH RSA/DSA authentication via the GUI 12/16/2003 11:18 AM As a UNIX system admin, I have about 40 servers that I need to access via SSH. I recently retired my good old first gen PowerBook g3 and bought myself a new pbook, which was my first experience with OS X (panther). I was thr... Atom AuthenticationAtom Authentication 12/17/2003 07:19 PM Mark Pilgrim explains why the Atom developers are using a new kind of authentication scheme, and he explains why it's necessary. Authentication >> The Power of WhoAuthentication >> The Power of Who 01/06/2005 03:14 PM The Cloud Allows SIM AuthenticationThe Cloud Allows SIM Authentication 05/04/2004 02:03 PM The Cloud customers can now get authenticated using SIM cards: Transat Technologies enables the service. SIM-based authentication is already being used by some hotspots in Europe and is expected to be a widely used authentication method there. Because Europeans use GSM for their cell phone technologies, they are already used to the concept of the SIM card. They can use the same SIM card for their cell phones and for hotspot authentication, which also means they could receive a single bill for both services. Some of the early SIM-based WLAN authentication solutions are pretty rudimentary. They involve the user sending a message from their cell phone to get a code that allows them to access the WLAN. But the more sophisticated solutions include a SIM card reader on a laptop. The SIM card authenticates the user but also applies encryption and security to the communication between the client and the network. That is likely the offering Transat is delivering for The Cloud. At the CTIA Wireless I.T. show last fall I talked to a handful of companies that are touting SIM-based authentication tools, including some of the big SIM card makers. While they're looking for a U.S. market, most weren't terribly bullish that the authentication method would take off here because people aren't widely used to the concept of using SIM cards. Even GSM users in the U.S. don't often realize that they have a SIM card.... Delegated AuthenticationDelegated Authentication 06/17/2005 07:10 PM Delegated authentication differs from federated authentication model in that the authentication authority delegates authentication yet again. It's a double-sided star system where the authentication authorities sits in the middle acting as a directory of sort. Delegated authentication model is not appropriate for weak authentication uses. So I doubt we'll see banks pushing customers to some federated authentication authority whenever they click on the sign-in button. Where it makes sense is protecting high-value transactions with strong and/or multi-party multi-factor authentication. As cryptic as what I wrote above may sound, the net effect is that a) consumers will be able to buy their favorite secure token at Fry's and use it to protect their bank account without worrying about whether the bank supports the device or not, b) banks of all sizes will be able to support a wide range of authentication methods cheaply, and c) strong authentication vendors will be able to market their products and services directly to consumers. The biggest hurdle for delegated authentication is that the cost of fraud risk have already become part of the balance sheet. Risk exposure is aggregated and taxed horizontally so that finanical risk is shared as part of operating cost. The net result is that individual customers face minimal financial risk which leaves them little incentives to be interested in strong authentication unless they are required to use them by their banks. The cost of authenticationThe cost of authentication 06/18/2004 04:52 AM Last issue we talked about two-factor authentication and I described such a scheme used by a Swedish bank (see link below). The bank requires a user to enter a unique identifier - a national ID number, similar to a U.S. Social Security number, a four digit PIN, and a one-time code that's revealed by scratching off the covering on one cell of a 50-cell card (similar to a scratch-off lottery ticket). I then posed the question: "Is that secure enough?" which can only, I believe, can be answered: "It depends." Trackback authenticationTrackback authentication 03/06/2004 02:09 AM Jacques Distler: The anonymous nature of the internet makes the problem of “identity” a hard one. In physics, when we encounter an intractably-hard problem, our most frequent dodge is to redefine the problem to one which admits a solution, and hope that the result is a “good-enough” stand-in for the original problem. In that spirit, I (re)defined the problem as reliably associating comments posted with the websites of the commenters. Just a suggestion: a lesser, but very much related and much more tractable, problem is trackbacks. The reason why it is more tractable is that the trackbacks are issued by software which could reasonably be expected to have direct access to your weblog's private keys. This could make signing totally automatic - simply check a box once, and your template could be updated and all future trackbacks would be automatically signed. The signatures could be passed as a new CGI parameter or as a HTTP header. Neither would likely affect any existing software that wasn't expecting this information. Once trackback signing is widely enough adopted, people may feel comfortable turning off the ability to accept unsigned trackbacks. And then much of the infrastructure will be in place to tackle the harder, and more important problem, of comment signing. The key nut to crack there is to make it easy and painless to sign a comment. iTunes 4.5 Authentication CrackediTunes 4.5 Authentication Cracked 04/29/2004 12:04 PM ASP.NET Forms Authentication Best
|
Also check out: |