[WEB SECURITY] Password Reset

Paul Johnston paul.johnston at pentest.co.uk
Thu May 27 05:46:07 EDT 2010


Does this provide any benefits over an OpenID provider that uses SSL
client certificates to authenticate users?


On 26/05/2010 18:38, Nick Owen wrote:
> Instead of developing an in-house OTP solution, you could utilize and
> contribute to our open-source two-factor auth solution:
> http://www.wikidsystems.com/community-version

Pentest - When a tick in the box is not enough

Paul Johnston - IT Security Consultant / Tiger SST
Pentest Limited - ISO 9001 (cert 16055) / ISO 27001 (cert 558982)

Office: +44 (0) 161 233 0100
Mobile: +44 (0) 7817 219 072

Email policy: http://www.pentest.co.uk/legal.shtml#emailpolicy
Registered Number: 4217114 England & Wales
Registered Office: 26a The Downs, Altrincham, Cheshire, WA14 2PU, UK

Join us on IRC: irc.freenode.net #webappsec

Have a question? Search The Web Security Mailing List Archives: 

Subscribe via RSS: 
http://www.webappsec.org/rss/websecurity.rss [RSS Feed]

Join WASC on LinkedIn

More information about the websecurity mailing list