(#7) Web Security Tip: Passport security issues |
 |
By Avi Rubin and Dave Kormann
18 Jan 2002 | SearchSecurity |
|
|
This Web Security Tip analyzing Windows Passport security issues received a user rating of 4.60. Do you have a Windows security tip? Submit it to searchSecurity.
With the release of Windows XP comes access to a new feature called Passport. Passport has been around since January 2000, but it is receiving more attention now that it is integrated with Windows XP and is related to Hailstorm. Passport is a single sign-on mechanism for e-commerce. Instead of e-commerce customers needing to create separate usernames and passwords for every e-commerce site they visit, they need only to authenticate with a single Passport server. Then through a series of authentications and encrypted cookie certificates, the user is able to purchase items at any participating e-commerce site.
This tip will summarize the risks of Passport so that you as a security expert will be informed enough to advise your customers.
Read the rest of this tip.
For more information on this topic, visit these other searchSecurity resources:
Best Web Links: Securing Microsoft applications
Best Web Links: Securing the Internet and e-commerce
|
|
|
|
