<?xml version="1.0" encoding="utf-8"?>
<feed xml:lang="en-us" xmlns="http://www.w3.org/2005/Atom"><title>Simon Willison's Weblog: challengresponse</title><link href="http://simonwillison.net/" rel="alternate"/><link href="http://simonwillison.net/tags/challengresponse.atom" rel="self"/><id>http://simonwillison.net/</id><updated>2007-10-02T01:14:47+00:00</updated><author><name>Simon Willison</name></author><entry><title>Cronto</title><link href="https://simonwillison.net/2007/Oct/2/cronto/#atom-tag" rel="alternate"/><published>2007-10-02T01:14:47+00:00</published><updated>2007-10-02T01:14:47+00:00</updated><id>https://simonwillison.net/2007/Oct/2/cronto/#atom-tag</id><summary type="html">
    
&lt;p&gt;&lt;strong&gt;&lt;a href="http://www.cronto.com/technology.htm"&gt;Cronto&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;
I saw a demo of this the other day—it’s a neat anti-phishing scheme that also protects against man in the middle attacks. It works using challenge/response: an image is shown which embeds a signed transaction code; the user then uses an application on their laptop or mobile phone to decode the image and enters the resulting code back in to the online application.


    &lt;p&gt;Tags: &lt;a href="https://simonwillison.net/tags/challengresponse"&gt;challengresponse&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/cronto"&gt;cronto&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/maninthemiddle"&gt;maninthemiddle&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/openid"&gt;openid&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/phishing"&gt;phishing&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/security"&gt;security&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/signing"&gt;signing&lt;/a&gt;&lt;/p&gt;



</summary><category term="challengresponse"/><category term="cronto"/><category term="maninthemiddle"/><category term="openid"/><category term="phishing"/><category term="security"/><category term="signing"/></entry></feed>