Single Sign On
From FreeAuth Wiki
[edit] About Single Sign On Concept
While OTPs are good for authentication, session IDs can still be hijacked and server connections proxied for man in the middle attacks and OTPs (and virtually every other SSO method) can do nothing to prevent this.
What OTPs and more specifically the Free Auth Java MIDLet solution allows for is a decentralised portable authentication scheme that doesn't rely on static information that can be used to track you, or a central database that can track you. All you need is a phone (or similar device) that can handle the java run time micro edition (J2ME AKA Java for Phones and PDAs).
See the FreeAuth MIDLet page for details on a java phone based OTP solution.
[edit] Sites that utilise OTP logins
- http://www.CAcert.org CAcert.org
- http://www.e164.org e164.org
- http://www.NodeDB.com NodeDB.com
- http://www.gas-tankstellen.de gas-tankstellen.de

