Two-Way Authentication

Authentication is the process of proving that you are who you claim to be. The frequent use of bogus websites demonstrates the need not only for the users to prove their identity to a site, but also for a site to prove its identity to the users. One way to accomplish this type of two-way authentication is for the user to choose a secret symbol, such as a small picture of a tropical sunset, which is known only between the user and the site. Henceforth, whenever that user visits the site, that tropical sunset picture is displayed alongside the rest of the site information. A malicious site replica will not know which symbol to produce, so even if a user is tricked into visiting one, it will be clear that the site is not authentic. ...

Get Windows 8 In Depth now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.