|
Posted by Nick Owen on May 13, 2007, 8:33 am
Please log in for more thread options > > It is indeed possible that your financial institution offers WebConnect
> > for download. But, you may have to initiate the download at your FI's
> > website.
>
> Doh. That's exactly it.
>
> > I have noticed an increasing trend on the part of the financial
> > institutions I have accounts with, to force a website login, rather than
> > allow transactions to be initiated through Quicken. Maybe it is concern
> > over security (more and more the FI's are asking for more than just
> > passwords to verify accounts - pics that you select to identify yourself,
> > computer id checks, security questions).
>
> It's actually a reaction to new laws requiring such changes with more
> changes to come. I guess I should have put those two together. Obviously
> there must be some way for Quicken to embed astrong authentication
> mechanism to retain, encrypt, and produce otherstrong authentication
> mechanisms for these websites.
One of our customers has done exactly that for a corporate banking
application. They have embedded cryptographic key-based two-factor
authentication into their client software and added support for it
into their server. Still pretty seemless to the user but much more
secure than image and cookie-based systems that are easily thwarted.
It was easier, though, because that one company controls both the
server and the client.
Nick
--
Nick Owen
WiKID Systems, Inc.
404.962.8983
http://www.wikidsystems.com Commercial/Open Source Two-Factor Authentication
|