Comments on Prevent Phishing with Mutual Authentication
Prevent Phishing with Mutual Authentication Phishing is a man-in-the-middle attack. While many people think using time-bound, one-time passwords will solve the problem, they are wrong as attacks will just become automated. What is required is strong mutual authentication - authentication of the host to the user as well as the user to the host. This article demonstrates how to do that using open-source software from WiKID.
1 Comment(s)
Comments
This does not work. Almost all companies and schools use deep-packet-insepction firewalls; so you will never be able to log in from work or school with this, because the certificates will be wrong (which is a correct operation).
Look at CryptoPhoto - it's 100x faster than this idea, and works everywhere.