Perry E. Metzger (perry@piermont.com)
Wed, 30 Sep 1998 16:03:14 -0400
Vin McLellan writes:
> Perry Metzger <perry@piermont.com> dismissed the whole genre of
> hand-held authentication tokens: "In a world of TCP hijacking, who cares if
> the one time system is good?"
>
> (Maybe someone who really wants to know who is coming through the VPN?)
Given TCP hijacking, it won't tell you who is coming through the
VPN. You need a strong cryptographic authentication system for the
entire session anyway, which makes SecureID less useful.
Perry
The following archive was created by hippie-mail 7.98617-22 on Sat Apr 10 1999 - 01:14:02