|
|
|
|
|
by rwmj
4545 days ago
|
|
Although there are some problems with the implementation, I've come to like it for a couple of reasons: (1) It authenticates features of your browser (like user-agent, IP address) to score the transaction. These are somewhat hard for an attacker to duplicate. (2) With some UK banks, it is combined with a hardware one-time password generator to form a reasonably robust two-factor authentication. Now there are certainly problems, such as it appearing in a frame, and not appearing as a subdomain of your bank, and those should be fixed. |
|