LWN.net Logo

DRI3000

DRI3000

Posted Feb 13, 2013 14:17 UTC (Wed) by iq-0 (subscriber, #36655)
In reply to: DRI3000 by renox
Parent article: LCA: The X-men speak

Agreed. But solving that problem is solving the "trusted originator" problem.

This trick could be used to implement a ctrl-alt-del out-of-band validation scheme where a QR-code like tag in a webpage can be used to show a separately loaded website (with very explicit origin information and extra strict settings).

And it would be a light-weight alternative to using a separate device with a camera (and people are free to choose whichever they want to use for the OOB validation).

I'd really like Paypal or my bank to support such an optional validation of a transaction and having an implementation baked-in to the system would make for a very light-weight workflow and be a good deal better than the current variant (and an optional 2nd device out-of-band check for local malware problems and possibly even compromised local networks).


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds