Out of Band Password Administration
Many of us who work in information security have long bemoaned the shortcomings of using passwords as an authentication factor. One of the first alternatives to passwords in the form of two factor authentication was the token that would generate a one time password solution. An interesting alternative to this token solution is an ‘out of band’ solution that involves pushing a password to the mobile phone of the user.
Are any of you currently using these or any of the out of band solutions to authenticate users? Share your experiences/thoughts by posting a comment.
For more information read this white paper. Also, check out phonefactor.com and authentify.com.
Subscribe to comments via RSS 2.0
You can leave a response, or trackback from your own site.

