Single Sign On

From FreeAuth Wiki

Jump to: navigation, search

[edit] About Single Sign On Concept

While OTPs are good for authentication, session IDs can still be hijacked and server connections proxied for man in the middle attacks and OTPs (and virtually every other SSO method) can do nothing to prevent this.

What OTPs and more specifically the Free Auth Java MIDLet solution allows for is a decentralised portable authentication scheme that doesn't rely on static information that can be used to track you, or a central database that can track you. All you need is a phone (or similar device) that can handle the java run time micro edition (J2ME AKA Java for Phones and PDAs).

See the FreeAuth MIDLet page for details on a java phone based OTP solution.

[edit] Sites that utilise OTP logins

Personal tools