Re: Microsoft marries RSA Security to Windows

2002-10-15 Thread Arnold G. Reinhold
authentication method. Cheers, Ed Gerck Roy M.Silvernail wrote: On Tuesday 08 October 2002 10:11 pm, it was said: Microsoft marries RSA Security to Windows http://www.theregister.co.uk/content/55/27499.html [...] The first initiatives will centre on Microsoft's licensing of RSA SecurID two

Re: Microsoft marries RSA Security to Windows

2002-10-15 Thread Ed Gerck
, and the door may open for a standards-based two-channel authentication method. Cheers, Ed Gerck Roy M.Silvernail wrote: On Tuesday 08 October 2002 10:11 pm, it was said: Microsoft marries RSA Security to Windows http://www.theregister.co.uk/content/55/27499.html

Re: Microsoft marries RSA Security to Windows

2002-10-15 Thread bear
On Wed, 9 Oct 2002, Joseph Ashwood wrote: Unfortunately, SecurID hasn't been that way for a while. RSA has offered executables for various operating systems for some time now. I agree it destroys what there was of the security, and reduces it to basically the level of username/password, albeit

Re: Microsoft marries RSA Security to Windows

2002-10-15 Thread Arnold G. Reinhold
At 8:40 AM -0700 10/11/02, Ed Gerck wrote: Arnold G. Reinhold wrote: I can see a number of problems with using mobile phones as a second channel for authentication: Great questions. Without aspiring to exhaust the answers, let me comment. 1. It begs the question of tamper resistant

Re: Microsoft marries RSA Security to Windows

2002-10-15 Thread Ed Gerck
[I'm reducing the reply level to 2, for context please see former msg] Arnold G. Reinhold wrote: At 8:40 AM -0700 10/11/02, Ed Gerck wrote: Cloning the cell phone has no effect unless you also have the credentials to initiate the transaction. The cell phone cannot initiate the authentication

Re: Microsoft marries RSA Security to Windows

2002-10-10 Thread Joseph Ashwood
- Original Message - From: Roy M.Silvernail [EMAIL PROTECTED] And here, I thought that a portion of the security embodied in a SecurID token was the fact that it was a tamper-resistant, independent piece of hardware. Now M$ wants to put the PRNG out in plain view, along with its seed

Re: Microsoft marries RSA Security to Windows

2002-10-10 Thread Roy M. Silvernail
Tamper-resistant hardware is out, second channel with remote source is in. Trust can be induced this way too, and better. There is no need for PRNG in plain view, no seed value known. Delay time of 60 seconds (or more) is fine because each one-time code applies only to one page served.

Re: Microsoft marries RSA Security to Windows

2002-10-10 Thread Dan Riley
Roy M.Silvernail [EMAIL PROTECTED] writes: The first initiatives will centre on Microsoft's licensing of RSA SecurID two-factor authentication software and RSA Security's development of an RSA SecurID Software Token for Pocket PC. And here, I thought that a portion of the security

Re: Microsoft marries RSA Security to Windows

2002-10-10 Thread Ed Gerck
: On Tuesday 08 October 2002 10:11 pm, it was said: Microsoft marries RSA Security to Windows http://www.theregister.co.uk/content/55/27499.html [...] The first initiatives will centre on Microsoft's licensing of RSA SecurID two-factor authentication software and RSA Security's development

Re: Microsoft marries RSA Security to Windows

2002-10-09 Thread Roy M . Silvernail
On Tuesday 08 October 2002 10:11 pm, it was said: Microsoft marries RSA Security to Windows http://www.theregister.co.uk/content/55/27499.html [...] The first initiatives will centre on Microsoft's licensing of RSA SecurID two-factor authentication software and RSA Security's development

Microsoft marries RSA Security to Windows

2002-10-08 Thread R. A. Hettinga
--- begin forwarded text Status: RO From: Elyn Wollensky [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: William Knowles [EMAIL PROTECTED] Subject: Microsoft marries RSA Security to Windows Date: Tue, 8 Oct 2002 17:44:57 -0400 Sender: [EMAIL PROTECTED] Microsoft marries RSA Security to Windows