Questions tagged [sitekey]

SiteKey is a system for mutual authentication intended to protect users from phishing.

Filter by
Sorted by
Tagged with
4 votes
2 answers

Is Yahoo SignIn Seal effective at phishing prevention? [duplicate]

Possible Duplicate: Effectiveness of Security Images Information about the efficacy of Yahoo's SignIn Seal is scarce, the best I could find was this section on Wikipedia's entry on Phishing, ...
mgibsonbr's user avatar
  • 2,925
20 votes
3 answers

Is SiteKey a valid defense against Phishing?

As described here, some banks use a SiteKey mechanism in an attempt to provide a defense against phishing. (This is a scheme where the user is shown a personalized image (each user has their own ...
David Stratton's user avatar
35 votes
2 answers

What is this authentication method/approach called?

Background: I want to implement something like this in our websites, and I'm looking for advice and possibly APIs that allow this out of the box rather than re-inventing the wheel, but I can't even ...
David Stratton's user avatar
8 votes
4 answers

Banking application login leaks information

My question is regarding the online banking application of a large credit card organisation. The login process for this application works as follows: User visits the homepage of the bank. User enters ...
mckiethanks's user avatar
58 votes
4 answers

Effectiveness of Security Images

Do security images such as those presented upon logging into banks provide any tangible security benefits, or are they mostly theater? Per my understanding, if somebody is phishing your users, it's ...
Stephen Touset's user avatar