[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Authentication at toad.com: WTF?



Hmm, yes, using agents for security verification seems reasonable;
if you've got a legal relationship or other sufficient trust.
It does also require an adequate communication path between you
and your agent - on the incoming side so you know that the message
the agent verified is the message you're seeing (e.g. the agent's
signature on the message, plus potentially some check to make sure
all the messages get delivered), and on the outgoing side to make
sure your agent gets your messages correctly.

	Bill