Join the Community

23,385
Expert opinions
42,358
Total members
307
New members (last 30 days)
186
New opinions (last 30 days)
29,106
Total comments

Man In The Middle

  0 2 comments

Sorry to say that the only way to really get past the Man in the Middle attack is to use a second secure channel to carry out the authentication and a transaction specific authentication.  It has to be used not only for transaction auth, but also for setting up new payees, for example.

Otherwise the MiM could simply let you input the auth, then bounce you an error message - Please try again in 15 minutes - while he has full access to your account.

There are a number of MiM resistant auth. solutions out there, Authentify was given the nod by HSBC, while Masabi, the secure mobile developers, have one featuring GrIDsure technology, that still has security even if both the PC and handset are compromised!

External

This content is provided by an external author without editing by Finextra. It expresses the views and opinions of the author.

Join the Community

23,385
Expert opinions
42,358
Total members
307
New members (last 30 days)
186
New opinions (last 30 days)
29,106
Total comments

Now Hiring