At 08:53 AM 6/29/2001 -0700, you wrote:
>Dave Warren wrote:
> >
> > It's secure enough for NetSol! *sigh*  Scary, huh?  NetSol really likes the
> > Word "Letterhead" templates, just put some clipart where the logo is, 
> and if
> > there isn't an active website, they just approve it.  If there is an active
> > website, just steal the logo from there, and it works just as well.
> > [snip]
> > That would be, IMO, more secure then a fax, since a fax can be forged, 
> but I
> > can't magically grab a phone number I don't own.


Hybrid.  When you receive a fax requesting a password release, you phone 
the contact on your database, or that you can verify via some external 
source.  Phone books, the active webpage, something...

That way, the documentation is justified, fax on file, and the call is made 
for security, which can be noted in the file, but it's (As you said) hard 
to prove in court.


========================================================
Dave Warren,  
 Email:  [EMAIL PROTECTED]
 Priority: [EMAIL PROTECTED]
========================================================


Reply via email to