[geeks] Interesting: hardware security token for PayPal

[Charles Shannon Hendrix]

Sun, 01 Apr 2007 @ 14:02 -0400, Phil Stracchino said:

> True, but you can't use those because they can't be replicated at the
> server.  If the key generation is modified using data not available to
> the server, the server cannot authenticate the resulting keys.

Yes, but you can use them for PKI, which was in my head at the time.

I've seen cards and PKI lock systems.

I suppose systems like that are good when you want PKI, but need
something tiny rather than a full blown computer.

There is also a ton of stuff out there which works but is utterly
useless.

There are also bad implementations, and getting the truth about it is
difficult.


-- 
shannon / 4649 5920 4320 204e 4452 5420 5348 5920 4820 2056 2054 434d 2048 
-------'  4d54 2045 204e 5259 4820 444e 0a53