[PHP] RE:[PHP] Client Computer Registration

2006-10-05 Thread Rahul S. Johari
Exactly! This is where I'd like to bring focus back on what it really was. Neither is keybank.com allowing access to a 'registered' computer simply because it's registered, nor is it laying a file, key or id certificate on the client's machine to enable it to login. As Wesley pointed out, they are

Re: [PHP] RE:[PHP] Client Computer Registration

2006-10-05 Thread Richard Lynch
On Wed, October 4, 2006 2:36 am, Wesley Acheson wrote: > I don't see how its that much of a secuity risk, they create a ssh > tunnel. All it does is add an extra layer of authentication. Its not > like the password requirements are bypassed. My fault. Somehow we got fixated on the idea that reg

Re: [PHP] RE:[PHP] Client Computer Registration

2006-10-04 Thread Wesley Acheson
I don't see how its that much of a secuity risk, they create a ssh tunnel. All it does is add an extra layer of authentication. Its not like the password requirements are bypassed. On 10/3/06, Richard Lynch <[EMAIL PROTECTED]> wrote: On Tue, October 3, 2006 2:33 am, Wesley Acheson wrote: > Th

RE: [PHP] RE:[PHP] Client Computer Registration

2006-10-03 Thread Kristen G. Thorson
> -Original Message- > From: Richard Lynch [mailto:[EMAIL PROTECTED] > Sent: Tuesday, October 03, 2006 2:10 PM > To: Wesley Acheson > Cc: [EMAIL PROTECTED]; php-general@lists.php.net > Subject: Re: [PHP] RE:[PHP] Client Computer Registration > > On Tue, October

Re: [PHP] RE:[PHP] Client Computer Registration

2006-10-03 Thread Richard Lynch
On Tue, October 3, 2006 2:33 am, Wesley Acheson wrote: > They could also be doing something like giving the client an SSH key > to download, I've heard of this situation in a bank before. Is the key tied to my hardware? At least that stops the virus/Trojan scenario. But not the petty thief who b

Re: [PHP] RE:[PHP] Client Computer Registration

2006-10-03 Thread Joe Harman
Hey Rahul... I have seen this also... It's sort of neat and annoying all at the same time... I am just wondering if it's just a false sense of security to get more people to use there online banking... although I did read through their FAQs about this and they are saying they have been required b

[PHP] RE:[PHP] Client Computer Registration

2006-10-03 Thread Wesley Acheson
They could also be doing something like giving the client an SSH key to download, I've heard of this situation in a bank before. Though it does seem more likely that their just using cookie based authentication - From: "Rahul S.