Re: Proposal to anti-phishing

* Frank Knobbe:

> On Fri, 2005-01-14 at 23:58 +0100, Florian Weimer wrote:
> > > The solution is based in a hardware token that is
> > > delivered to every customer. 
> >
> > It's acceptable neither to customers nor to banks.  These days,
> > zero-setup online banking is an absolute must.

> perhaps that is true for regular consumer-grade banking clients. But for
> high dollar transaction processing, zero-setup online banking, which
> lack any type of security controls, is not acceptable -- neither to the
> account owner nor the banks.

Of course, but these customers usually do not demand online banking
(at least over here).  Other services, like batch processing of
transactions, are more important.  Often, these procedures are not
inherently more secure than online banking, they are just very, very
different.  But impersonating the bank in the real world is a bit more
difficult, I think, at least for non-consumer transactions which
involve real people.