src/firefoxos/help.html@09006594d51d (annotated)
src/firefoxos/help.html
Tue, 23 Apr 2013 22:01:36 +0200
- author
- Michael Schloh von Bennewitz <michael@schloh.com>
- date
- Tue, 23 Apr 2013 22:01:36 +0200
- changeset 3
- 09006594d51d
- parent 0
- 6a0957738c54
- permissions
- -rw-r--r--
Correct wording of internationalization and replace with abbreviations.
| michael@0 | 1 | <!DOCTYPE html> |
| michael@0 | 2 | <!-- |
| michael@0 | 3 | OTPWCalc - One time password challenge response calculator client |
| michael@0 | 4 | Copyright © 2013 Michael Schloh von Bennewitz <michael@schloh.com> |
| michael@0 | 5 | |
| michael@0 | 6 | OTPWCalc is free software: you can redistribute it and/or modify |
| michael@0 | 7 | it under the terms of the European Union Public Licence, either |
| michael@0 | 8 | version 1.1 of the license, or (at your option) any later version. |
| michael@0 | 9 | |
| michael@0 | 10 | OTPWCalc is distributed in the hope that it will be useful, |
| michael@0 | 11 | but WITHOUT ANY WARRANTY; without even the implied warranty |
| michael@0 | 12 | of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See |
| michael@0 | 13 | the European Union Public License for more details. |
| michael@0 | 14 | |
| michael@0 | 15 | You should have received a copy of the European Union Public |
| michael@0 | 16 | Licence along with OTPWCalc. If not, please refer to |
| michael@0 | 17 | <http://joinup.ec.europa.eu/software/page/eupl/>. |
| michael@0 | 18 | |
| michael@0 | 19 | This file is part of project OTWPCalc, a one time password challenge |
| michael@0 | 20 | response calculator client and is found at http://otpwcalc.europalab.com/ |
| michael@0 | 21 | |
| michael@0 | 22 | help.html: W3C HTML implementation |
| michael@0 | 23 | --> |
| michael@0 | 24 | |
| michael@0 | 25 | <html> |
| michael@0 | 26 | <head> |
| michael@0 | 27 | <meta charset="utf-8"> |
| michael@0 | 28 | <meta name="viewport" content="width=device-width, initial-scale=1"> |
| michael@0 | 29 | <title>OTPWCalc</title> |
| michael@0 | 30 | <link rel="stylesheet" href="jquery.mobile/jquery.mobile-1.3.1.min.css" /> |
| michael@0 | 31 | <link rel="stylesheet" href="main.css" /> |
| michael@0 | 32 | <script src="jquery.core/jquery-1.9.1.js"></script> |
| michael@0 | 33 | <script src="help.js"></script> |
| michael@0 | 34 | <script src="jquery.mobile/jquery.mobile-1.3.1.min.js"></script> |
| michael@0 | 35 | </head> |
| michael@0 | 36 | <body> |
| michael@0 | 37 | <!-- Data attributes reserved by JQuery Mobile: |
| michael@0 | 38 | data-theme, data-ajax, data-filter, data-icon, data-grid, |
| michael@0 | 39 | data-rel, data-icon, data-url, data-role, and data-type --> |
| michael@0 | 40 | <div data-role="page" class="type-interior"> |
| michael@0 | 41 | <!-- H1 header data-role good for Search Engine Optimization --> |
| michael@0 | 42 | <!--<div data-role="header" data-position="inline">--> |
| michael@0 | 43 | <div data-role="header" data-position="fixed" data-id="headhelp"> |
| michael@0 | 44 | <h1>OTPWCalc</h1> |
| michael@0 | 45 | </div><!-- /header --> |
| michael@0 | 46 | <div data-role="content"> |
| michael@0 | 47 | <div class="content-primary"> |
| michael@0 | 48 | <h1 style="text-align: center; margin: 0;">Help</h1> |
| michael@0 | 49 | <a href="#faq" data-role="button" data-theme="e" data-icon="otpwcalc-question" data-iconpos="right" data-transition="flow">F. A. Q.</a> |
| michael@0 | 50 | <a href="#quickstart" data-role="button" data-theme="e" data-icon="otpwcalc-qstart" data-iconpos="right" data-transition="flow">Quickstart</a> |
| michael@0 | 51 | <a href="#manpage" data-role="button" data-theme="e" data-icon="otpwcalc-manpage" data-iconpos="right" data-transition="flow">Manpage</a> |
| michael@0 | 52 | <a href="//list.europalab.com/mailman/listinfo/otpwcalc/" data-role="button" data-theme="e" data-icon="otpwcalc-email" data-iconpos="right" data-transition="flow">Mailinglist</a> |
| michael@0 | 53 | <a href="#security" data-role="button" data-theme="e" data-icon="otpwcalc-security" data-iconpos="right" data-transition="flow">Security</a> |
| michael@0 | 54 | <a href="#standrfc" data-role="button" data-theme="e" data-icon="otpwcalc-document" data-iconpos="right" data-transition="flow">Standards</a> |
| michael@0 | 55 | </div><!-- /content-primary --> |
| michael@0 | 56 | </div><!-- /content --> |
| michael@0 | 57 | </div><!-- /page --> |
| michael@0 | 58 | |
| michael@0 | 59 | <div data-role="page" class="type-interior" id="faq"> |
| michael@0 | 60 | <div data-role="header" data-id="headfaq"> |
| michael@0 | 61 | <h1>OTPWCalc</h1> |
| michael@0 | 62 | </div><!-- /header --> |
| michael@0 | 63 | <div data-role="content"> |
| michael@0 | 64 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d" data-inset="false" data-theme="c" data-content-theme="c"> |
| michael@0 | 65 | <h3 style="margin-top: 0; margin-bottom: 0;">What is a One Time Password?</h3> |
| michael@0 | 66 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">A One Time Password (OTP) is a password valid only for a <strong>single use</strong> and, once used, cannot be used again for authentication. OTPs avoid a number of shortcomings that are associated with traditional (static) passwords.</p> |
| michael@0 | 67 | </div> |
| michael@0 | 68 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
| michael@0 | 69 | <h3>What can I do with this app?</h3> |
| michael@0 | 70 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">This application serves one purpose only. It calculates and prints a OTP.</p> |
| michael@0 | 71 | </div> |
| michael@0 | 72 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
| michael@0 | 73 | <h3>What can I do with OTPs?</h3> |
| michael@0 | 74 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Most people use OTPs to log in to their website administration, CMS, or remote console.</p> |
| michael@0 | 75 | </div> |
| michael@0 | 76 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
| michael@0 | 77 | <h3>Can I log into my Google account?</h3> |
| michael@0 | 78 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">No. Google uses OTPs, but in a slightly nonstandard way. OTPWCalc cannot calculate OTPs useful for Google authentication yet.</p> |
| michael@0 | 79 | </div> |
| michael@0 | 80 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
| michael@0 | 81 | <h3>Can I log in to Win/OSX/Oracle?</h3> |
| michael@0 | 82 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Yes, but some work is needed on the Windows/OSX/Oracle computer to configure the authentication subsystem.</p> |
| michael@0 | 83 | </div> |
| michael@0 | 84 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
| michael@0 | 85 | <h3>Can I log in to Unix/Linux?</h3> |
| michael@0 | 86 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Yes, by using PAM and it's quite easy.</p> |
| michael@0 | 87 | </div> |
| michael@0 | 88 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
| michael@0 | 89 | <h3>What else can I do with it?</h3> |
| michael@0 | 90 | <ol style="margin-top: 0.5em;"> |
| michael@0 | 91 | <li>Impress your friends</li> |
| michael@0 | 92 | <li>VPN authentication</li> |
| michael@0 | 93 | <li>Single sign on</li> |
| michael@0 | 94 | <li>Remote access</li> |
| michael@0 | 95 | <li>Computer login</li> |
| michael@0 | 96 | <li>Disk encryption</li> |
| michael@0 | 97 | <li>Internet services</li> |
| michael@0 | 98 | <li>Systems integration</li> |
| michael@0 | 99 | <li>CMS authentication</li> |
| michael@0 | 100 | <li>Password management</li> |
| michael@0 | 101 | <li>Email and money transfer</li> |
| michael@0 | 102 | <li>Bank transaction validation</li> |
| michael@0 | 103 | </ol> |
| michael@0 | 104 | </div> |
| michael@0 | 105 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
| michael@0 | 106 | <h3>Can I install OTPWCalc on …?</h3> |
| michael@0 | 107 | <ul style="margin-top: 0.5em;"> |
| michael@0 | 108 | <li>FirefoxOS: <strong>Yes</strong></li> |
| michael@0 | 109 | <li>Sailfish: No</li> |
| michael@0 | 110 | <li>Android: No</li> |
| michael@0 | 111 | <li>Tizen: <strong>Yes</strong></li> |
| michael@0 | 112 | <li>MeeGo: No</li> |
| michael@0 | 113 | <li>Bada: No</li> |
| michael@0 | 114 | <li>iOS: No</li> |
| michael@0 | 115 | <li>Unix: No</li> |
| michael@0 | 116 | <li>Linux: No</li> |
| michael@0 | 117 | <li>Mac OSX: No</li> |
| michael@0 | 118 | <li>BlackBerry QNX: No</li> |
| michael@0 | 119 | <li>Windows Phone: <strong>Yes</strong></li> |
| michael@0 | 120 | <li>Windows Store: <strong>Yes</strong></li> |
| michael@0 | 121 | </ul> |
| michael@0 | 122 | </div> |
| michael@0 | 123 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
| michael@0 | 124 | <h3>Why isn't OTPWCalc compatible?</h3> |
| michael@0 | 125 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">OTPWCalc might not be compatible with your platform of choice, usually because the necessary hardware isn't available to the author for development.</p> |
| michael@0 | 126 | </div> |
| michael@0 | 127 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
| michael@0 | 128 | <h3>What happens to my password?</h3> |
| michael@0 | 129 | <p style="margin-top: 0.25em;">Take a look at the entry point in |
| michael@0 | 130 | <strong>main.js</strong>:</p> |
| michael@0 | 131 | <code style="margin-left: 2em; display:inline-block; line-height: 120%;"> |
| michael@0 | 132 | var secr = $('#paswrd').val();<br /> |
| michael@0 | 133 | var resp = hash(secr, user, iter); |
| michael@0 | 134 | </code> |
| michael@0 | 135 | <p style="margin-bottom: 0.25em;">In other words, the password you enter is neither stored nor transmitted. In fact, OTPWCalc doesn't store or transmit any data input <strong>at all</strong> (see James Bond question later.) It's a <em>calculator</em> in the true sense, just like a pocket calculator that adds numbers.</p> |
| michael@0 | 136 | </div> |
| michael@0 | 137 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
| michael@0 | 138 | <h3>Is OTPWCalc safe and secure?</h3> |
| michael@0 | 139 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">The algorithms of OTP have proven worthy of <strong>high security applications</strong>. OTPWCalc has been carefully designed and is tested thoroughly. It's both secure and safe to use.</p> |
| michael@0 | 140 | </div> |
| michael@0 | 141 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
| michael@0 | 142 | <h3>Is it useful in a corporate setting?</h3> |
| michael@0 | 143 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Yes. Custom built enterprise versions are available accompanied with commercial support. Visit the <a href="//otpwcalc.europalab.com/">OTPWCalc homepage</a> for information.</p> |
| michael@0 | 144 | </div> |
| michael@0 | 145 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
| michael@0 | 146 | <h3>Does James Bond use OTPWCalc?</h3> |
| michael@0 | 147 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Maybe, but spies probably just look over shoulders or use cameras to steal the static passwords used in OTP systems.</p> |
| michael@0 | 148 | </div> |
| michael@0 | 149 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
| michael@0 | 150 | <h3>Same as Yubikey or RSA SecurID?</h3> |
| michael@0 | 151 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Yubikey, RSA SecurID, and OTPWCalc use similar technologies for similar applications, but OTPWCalc is strictly software and doesn't depend on the time or date.</p> |
| michael@0 | 152 | </div> |
| michael@0 | 153 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
| michael@0 | 154 | <h3>How can I upgrade my OTPWCalc?</h3> |
| michael@0 | 155 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">This varies according to the operating system used so there's no single answer.</p> |
| michael@0 | 156 | </div> |
| michael@0 | 157 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
| michael@0 | 158 | <h3>Who owns OTPWCalc?</h3> |
| michael@0 | 159 | <p style="margin-top: 0.25em; margin-bottom: 0;">OTPWCalc is the property of the copyright holder, Michael Schloh von Bennewitz.</p> |
| michael@0 | 160 | </div> |
| michael@0 | 161 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
| michael@0 | 162 | <h3>Is OTPWCalc licensed?</h3> |
| michael@0 | 163 | <p style="margin-top: 0.25em; margin-bottom: 0;">OTPWCalc is distributed under the terms of the <a href="//joinup.ec.europa.eu/software/page/eupl/">European Union Public Licence</a>. This liberal license grants you freedom to use the software and much more.</p> |
| michael@0 | 164 | </div> |
| michael@0 | 165 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
| michael@0 | 166 | <h3>Which programming language?</h3> |
| michael@0 | 167 | <p style="margin-top: 0.25em; margin-bottom: 0;">OTPWCalc is built using the HTML, CSS, and JavaScript languages.</p> |
| michael@0 | 168 | <p style="margin-top: 0.5em; margin-bottom: 0.25em;">The jQuery Mobile and Apache Cordova development frameworks provide important additional features.</p> |
| michael@0 | 169 | </div> |
| michael@0 | 170 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
| michael@0 | 171 | <h3>What are ongoing developments?</h3> |
| michael@0 | 172 | <p style="margin-top: 0.25em;">OTPWCalc is both active and stable, and follows a project management plan.</p> |
| michael@0 | 173 | <ul> |
| michael@3 | 174 | <li>It is undergoing i18n and l10n to several european languages.</li> |
| michael@0 | 175 | <li style="margin-top: 0.5em;"><strong>HMAC</strong>-based RFC 4226 (HOTP) is being implemented.</li> |
| michael@0 | 176 | <li style="margin-top: 0.5em;">Features like QR and OpenID integration are being explored.</li> |
| michael@0 | 177 | <li style="margin-top: 0.5em;">Most of all, OTPWCalc is being <em>ported to new platforms</em>.</li> |
| michael@0 | 178 | </ul> |
| michael@0 | 179 | <p style="margin-top: 0.5em; margin-bottom: 0.25em;">To request features or pose questions please write to the <a href="//list.europalab.com/mailman/listinfo/otpwcalc/">mailing list</a>.</p> |
| michael@0 | 180 | </div> |
| michael@0 | 181 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
| michael@0 | 182 | <h3>How can I report a bogue (bug)?</h3> |
| michael@0 | 183 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Please write to the <a href="//list.europalab.com/mailman/listinfo/otpwcalc/">mailing list</a> stating the OTPWCalc version and platform. Thanks for every bug report!</p> |
| michael@0 | 184 | </div> |
| michael@0 | 185 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
| michael@0 | 186 | <h3>My question isn't answered,<br />or this is just not working!</h3> |
| michael@0 | 187 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Please turn to the <a href="//list.europalab.com/mailman/listinfo/otpwcalc/">mailing list</a> and ask for help there. Answers appear in a day.</p> |
| michael@0 | 188 | </div> |
| michael@0 | 189 | </div><!-- /content --> |
| michael@0 | 190 | </div><!-- /page --> |
| michael@0 | 191 | |
| michael@0 | 192 | <div data-role="page" class="type-interior" id="quickstart"> |
| michael@0 | 193 | <div data-role="header" data-position="fixed" data-id="headquick"> |
| michael@0 | 194 | <h1>OTPWCalc</h1> |
| michael@0 | 195 | </div><!-- /header --> |
| michael@0 | 196 | <div data-role="content"> |
| michael@0 | 197 | <h3 style="margin-top: 0; margin-bottom: 0;"> |
| michael@0 | 198 | To start using OTPWCalc now… |
| michael@0 | 199 | </h3> |
| michael@0 | 200 | <ol style="margin-top: 0.5em; margin-bottom: 0;"> |
| michael@0 | 201 | <li style="margin-bottom: 0.5em;">Install and configure a OTP authentication server on the <strong>host computer</strong>.</li> |
| michael@0 | 202 | <li style="margin-bottom: 0.5em;">Add a username, seed ID, and password to the OTP <strong>authentication server</strong>.</li> |
| michael@0 | 203 | <li style="margin-bottom: 0.5em;">Log in to the host computer providing the recently added username. The host computer will reply with a challange including the appropriate <strong>seed ID</strong> and a new <strong>counter number</strong>.</li> |
| michael@0 | 204 | <li style="margin-bottom: 0.5em;">Type the seed ID and counter number along with the corresponding password into OTPWCalc. Click <strong>Submit</strong>.</li> |
| michael@0 | 205 | <li style="margin-bottom: 0.5em;">Read the resulting OTP in <div style="display: inline-block; color: rgb(192,0,0); text-transform: normal;">red uppercase characters</div>.</li> |
| michael@0 | 206 | <li style="margin-bottom: 0.5em;">Type the OTP into the host computer console and…<br /><em>Enjoy <strong>secure</strong> access!</em></li> |
| michael@0 | 207 | </ol> |
| michael@0 | 208 | </div><!-- /content --> |
| michael@0 | 209 | </div><!-- /page --> |
| michael@0 | 210 | |
| michael@0 | 211 | <div data-role="page" class="type-interior" id="manpage"> |
| michael@0 | 212 | <div data-role="header" data-position="fixed" data-id="headman"> |
| michael@0 | 213 | <h1>OTPWCalc</h1> |
| michael@0 | 214 | </div><!-- /header --> |
| michael@0 | 215 | <div data-role="content"> |
| michael@0 | 216 | <div style="float: left;">User Commands</div> |
| michael@0 | 217 | <div style="float: right;">OTPWCalc(1)</div> |
| michael@0 | 218 | <div style="clear: both;"></div> |
| michael@0 | 219 | <div style="margin-top: 1.5em; text-transform: uppercase; font-size: 0.75em;">Name</div> |
| michael@0 | 220 | <div style="margin-left: 2em; font-size: 0.75em;">OTPWCalc - Client application for calculating responses to OTP challenges.</div> |
| michael@0 | 221 | <div style="margin-top: 1.5em; text-transform: uppercase; font-size: 0.75em;">Synopsis</div> |
| michael@0 | 222 | <div style="margin-left: 2em; font-size: 0.75em;">OTPWCalc [-h] [-v] [-V]</div> |
| michael@0 | 223 | <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Description</div> |
| michael@0 | 224 | <div style="margin-left: 2em; font-size: 0.75em;">Playing the role of a hardware |
| michael@0 | 225 | token in a client server authentication system as described |
| michael@0 | 226 | in RFC 2289, OTPWCalc calculates responses to incoming |
| michael@0 | 227 | authentication challenges as typed in by the user.</div> |
| michael@0 | 228 | <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Options</div> |
| michael@0 | 229 | <div style="margin-left: 2em; font-size: 0.75em;"> |
| michael@0 | 230 | -h Display a brief help message and exit.<br /> |
| michael@0 | 231 | -v Print verbose text to the calling terminal.<br /> |
| michael@0 | 232 | -V Print the version number and exit. |
| michael@0 | 233 | </div> |
| michael@0 | 234 | <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Terms</div> |
| michael@0 | 235 | <div style="margin-left: 2em; font-size: 0.75em;">Username</div> |
| michael@0 | 236 | <div style="margin-left: 4em; font-size: 0.75em;"> |
| michael@0 | 237 | The name that the server knows. For example, 'albertc'. |
| michael@0 | 238 | </div> |
| michael@0 | 239 | <div style="margin-left: 2em; font-size: 0.75em;">Secret</div> |
| michael@0 | 240 | <div style="margin-left: 4em; font-size: 0.75em;"> |
| michael@0 | 241 | A password, usually selected by the user, that is |
| michael@0 | 242 | needed to gain access to the server. For example, |
| michael@0 | 243 | 'Mysec2-pw'. |
| michael@0 | 244 | </div> |
| michael@0 | 245 | <div style="margin-left: 2em; font-size: 0.75em;">Challenge</div> |
| michael@0 | 246 | <div style="margin-left: 4em; font-size: 0.75em;"> |
| michael@0 | 247 | Information printed by the server when it tries to |
| michael@0 | 248 | authenticate a user. This information is needed by |
| michael@0 | 249 | OTPWCalc to generate a proper response. For example, |
| michael@0 | 250 | 'otp-md5 820 dinw23612'. |
| michael@0 | 251 | </div> |
| michael@0 | 252 | <div style="margin-left: 2em; font-size: 0.75em;">Response</div> |
| michael@0 | 253 | <div style="margin-left: 4em; font-size: 0.75em;"> |
| michael@0 | 254 | Information generated from a challenge that is used |
| michael@0 | 255 | by the server to authenticate the user. For example, |
| michael@0 | 256 | 'BIEM ROSE JINX HARD BALL SKY NEW'. |
| michael@0 | 257 | </div> |
| michael@0 | 258 | <div style="margin-left: 2em; font-size: 0.75em;">Seed</div> |
| michael@0 | 259 | <div style="margin-left: 4em; font-size: 0.75em;"> |
| michael@0 | 260 | Information used in conjunction with the secret and |
| michael@0 | 261 | sequence number to compute the response. It allows |
| michael@0 | 262 | the same secret to be used for multiple sequences |
| michael@0 | 263 | by changing the seed, or for authentication to |
| michael@0 | 264 | multiple servers by using different seeds. |
| michael@0 | 265 | </div> |
| michael@0 | 266 | <div style="margin-left: 2em; font-size: 0.75em;">Sequence #</div> |
| michael@0 | 267 | <div style="margin-left: 4em; font-size: 0.75em;"> |
| michael@0 | 268 | A counter used to track key iterations. Each time |
| michael@0 | 269 | a successful response is received by the server the |
| michael@0 | 270 | sequence number is decremented. For example, 71. |
| michael@0 | 271 | </div> |
| michael@0 | 272 | <div style="margin-left: 2em; font-size: 0.75em;">Hash ID</div> |
| michael@0 | 273 | <div style="margin-left: 4em; font-size: 0.75em;"> |
| michael@0 | 274 | Text that identifies the cryptographical algorithm |
| michael@0 | 275 | used. The valid hash identifiers are 'otpmd4' |
| michael@0 | 276 | corresponding to MD4, and 'otp-md5' corresponding |
| michael@0 | 277 | to MD5. |
| michael@0 | 278 | </div> |
| michael@0 | 279 | <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Files</div> |
| michael@0 | 280 | <div style="margin-left: 2em; font-size: 0.75em;"> |
| michael@0 | 281 | The application may store a cookie in a file used to |
| michael@0 | 282 | restore the most recent settings. The location of this |
| michael@0 | 283 | file (or arbitrary data structure) varies according to |
| michael@0 | 284 | the operating system. |
| michael@0 | 285 | </div> |
| michael@0 | 286 | <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Bugs</div> |
| michael@0 | 287 | <div style="margin-left: 2em; font-size: 0.75em;">This manual.</div> |
| michael@0 | 288 | <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Security</div> |
| michael@0 | 289 | <div style="margin-left: 2em; font-size: 0.75em;"> |
| michael@0 | 290 | All of the authentication strategies covered in the |
| michael@0 | 291 | standards implemented by this application are vulnerable |
| michael@0 | 292 | to man in the middle (MITM) attacks. The strategies can |
| michael@0 | 293 | be combined with public key logic to defeat such attacks. |
| michael@0 | 294 | </div> |
| michael@0 | 295 | <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Standards</div> |
| michael@0 | 296 | <div style="margin-left: 2em; font-size: 0.75em;"> |
| michael@0 | 297 | The IETF standards RFC 1760 (The S/KEY One-Time Password |
| michael@0 | 298 | System) and RFC 2289 (A One-Time Password System) are |
| michael@0 | 299 | implemented. |
| michael@0 | 300 | </div> |
| michael@0 | 301 | <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">See also</div> |
| michael@0 | 302 | <div style="margin-left: 2em; font-size: 0.75em;"> |
| michael@0 | 303 | None. This is a self contained, stand alone application with |
| michael@0 | 304 | no alias commands. It is unique in that it leverages open |
| michael@0 | 305 | technologies like Javascript to run unmodified on a variety |
| michael@0 | 306 | of operating systems. |
| michael@0 | 307 | </div> |
| michael@0 | 308 | <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Author</div> |
| michael@0 | 309 | <div style="margin-left: 2em; font-size: 0.75em;"> |
| michael@0 | 310 | This application was written by <a href="//michael.schloh.com/"> |
| michael@0 | 311 | Michael Schloh von Bennewitz</a>. |
| michael@0 | 312 | </div> |
| michael@0 | 313 | <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Contact</div> |
| michael@0 | 314 | <div style="margin-left: 2em; font-size: 0.75em;"> |
| michael@0 | 315 | Please refer to the <a href="//otpwcalc.europalab.com/"> |
| michael@0 | 316 | OTPWCalc homepage</a> for contact information. |
| michael@0 | 317 | </div> |
| michael@0 | 318 | <div style="margin-top: 1.25em; text-transform: uppercase; font-size: 0.75em;">Support</div> |
| michael@0 | 319 | <div style="margin-left: 2em; font-size: 0.75em;"> |
| michael@0 | 320 | The <a href="//list.europalab.com/mailman/listinfo/otpwcalc/"> |
| michael@0 | 321 | OTPWCalc mailing list</a> provides information and answers to |
| michael@0 | 322 | questions. Commercial support is provided by the |
| michael@0 | 323 | <a href="mailto:michael@schloh.com">author</a>. |
| michael@0 | 324 | </div> |
| michael@0 | 325 | </div><!-- /content --> |
| michael@0 | 326 | </div><!-- /page --> |
| michael@0 | 327 | |
| michael@0 | 328 | <div data-role="page" class="type-interior" id="security"> |
| michael@0 | 329 | <div data-role="header" data-position="fixed" data-id="headsecurity"> |
| michael@0 | 330 | <h1>OTPWCalc</h1> |
| michael@0 | 331 | </div><!-- /header --> |
| michael@0 | 332 | <div data-role="content"> |
| michael@0 | 333 | <div data-role="collapsible" data-allow-collapse="false" data-collapsed="false" data-expanded-icon="otpwcalc-security" data-theme="c" data-content-theme="d"> |
| michael@0 | 334 | <h1>Security</h1> |
| michael@0 | 335 | <p style="margin-top: 0; margin-bottom: 0; font-size: 1.1em; line-height: 125%;">General <strong>security concerns</strong> should be directed to the <a href="//list.europalab.com/mailman/listinfo/otpwcalc/">mailing list</a>, while those of a private nature should be sent directly to the <a href="mailto:michael@schloh.com">author</a>. X.509 certificates (for exchanging S/MIME encrypted email) and GnuPG keys (to verify released software signatures) reside on the <a href="//michael.schloh.com/">author's website</a>.</p> |
| michael@0 | 336 | <p style="margin-top: 0.5em; margin-bottom: 0; font-size: 1.1em; line-height: 125%;">Please monitor the mailing list and keep your installation of OTPWCalc <strong>up to date</strong>!</p> |
| michael@0 | 337 | </div><!-- /collapsible --> |
| michael@0 | 338 | </div><!-- /content --> |
| michael@0 | 339 | </div><!-- /page --> |
| michael@0 | 340 | |
| michael@0 | 341 | <div data-role="page" class="type-interior" id="standrfc"> |
| michael@0 | 342 | <div data-role="header" data-position="fixed" data-id="headrfc"> |
| michael@0 | 343 | <h1>OTPWCalc</h1> |
| michael@0 | 344 | </div><!-- /header --> |
| michael@0 | 345 | <div data-role="content"> |
| michael@0 | 346 | <div data-role="collapsible" data-allow-collapse="false" data-collapsed="false" data-expanded-icon="otpwcalc-document" data-theme="c" data-content-theme="d"> |
| michael@0 | 347 | <h1>Standards</h1> |
| michael@0 | 348 | <p style="font-size: 1.1em; line-height: 125%;">This application implements<br />the following <strong>standards</strong>:</p> |
| michael@0 | 349 | <ul> |
| michael@0 | 350 | <li> |
| michael@0 | 351 | <a href="//tools.ietf.org/html/rfc2289/">RFC 2289, A One-Time Password System</a> |
| michael@0 | 352 | </li> |
| michael@0 | 353 | </ul> |
| michael@0 | 354 | </div><!-- /collapsible --> |
| michael@0 | 355 | </div><!-- /content --> |
| michael@0 | 356 | </div><!-- /page --> |
| michael@0 | 357 | </body> |
| michael@0 | 358 | </html> |
