src/firefoxos/help/hfaq.html

Fri, 26 Apr 2013 19:10:52 +0200

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Fri, 26 Apr 2013 19:10:52 +0200
changeset 4
5d1908d87db8
child 8
9b8205e1e4a4
permissions
-rw-r--r--

Implement touch gestures including left and right history swipes,
relocate help pages, update app cache manifest, and bump version
pending forthcoming release.

michael@4 1 <!DOCTYPE html>
michael@4 2 <!--
michael@4 3 OTPWCalc - One time password challenge response calculator client
michael@4 4 Copyright © 2013 Michael Schloh von Bennewitz <michael@schloh.com>
michael@4 5
michael@4 6 OTPWCalc is free software: you can redistribute it and/or modify
michael@4 7 it under the terms of the European Union Public Licence, either
michael@4 8 version 1.1 of the license, or (at your option) any later version.
michael@4 9
michael@4 10 OTPWCalc is distributed in the hope that it will be useful,
michael@4 11 but WITHOUT ANY WARRANTY; without even the implied warranty
michael@4 12 of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
michael@4 13 the European Union Public License for more details.
michael@4 14
michael@4 15 You should have received a copy of the European Union Public
michael@4 16 Licence along with OTPWCalc. If not, please refer to
michael@4 17 <http://joinup.ec.europa.eu/software/page/eupl/>.
michael@4 18
michael@4 19 This file is part of project OTWPCalc, a one time password challenge
michael@4 20 response calculator client and is found at http://otpwcalc.europalab.com/
michael@4 21
michael@4 22 hfaq.html: W3C HTML implementation
michael@4 23 -->
michael@4 24
michael@4 25 <html>
michael@4 26 <head>
michael@4 27 <meta charset="utf-8">
michael@4 28 <meta name="viewport" content="width=device-width, initial-scale=1">
michael@4 29 <title>OTPWCalc</title>
michael@4 30 <link rel="stylesheet" href="../jquery.mobile/jquery.mobile-1.3.1.min.css" />
michael@4 31 <link rel="stylesheet" href="../main.css" />
michael@4 32 <script src="../jquery.core/jquery-1.9.1.js"></script>
michael@4 33 <script src="help.js"></script>
michael@4 34 <script src="../jquery.mobile/jquery.mobile-1.3.1.min.js"></script>
michael@4 35 </head>
michael@4 36 <body>
michael@4 37 <!-- Data attributes reserved by JQuery Mobile:
michael@4 38 data-theme, data-ajax, data-filter, data-icon, data-grid,
michael@4 39 data-rel, data-icon, data-url, data-role, and data-type -->
michael@4 40 <!-- Also data-dom-cache="true" -->
michael@4 41 <div data-role="page" class="type-interior oc-swipage" id="faq">
michael@4 42 <div data-role="header" data-id="headfaq">
michael@4 43 <h1>OTPWCalc</h1>
michael@4 44 </div><!-- /header -->
michael@4 45 <div data-role="content">
michael@4 46 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d" data-inset="false" data-theme="c" data-content-theme="c">
michael@4 47 <h3 style="margin-top: 0; margin-bottom: 0;">What is a One Time Password?</h3>
michael@4 48 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">A One Time Password (OTP) is a password valid only for a <strong>single use</strong> and, once used, cannot be used again for authentication. OTPs avoid a number of shortcomings that are associated with traditional (static) passwords.</p>
michael@4 49 </div>
michael@4 50 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
michael@4 51 <h3>What can I do with this app?</h3>
michael@4 52 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">This application serves one purpose only. It calculates and prints a OTP.</p>
michael@4 53 </div>
michael@4 54 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
michael@4 55 <h3>What can I do with OTPs?</h3>
michael@4 56 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Most people use OTPs to log in to their website administration, CMS, or remote console.</p>
michael@4 57 </div>
michael@4 58 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
michael@4 59 <h3>Can I log into my Google account?</h3>
michael@4 60 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">No. Google uses OTPs, but in a slightly nonstandard way. OTPWCalc cannot calculate OTPs useful for Google authentication yet.</p>
michael@4 61 </div>
michael@4 62 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
michael@4 63 <h3>Can I log in to Win/OSX/Oracle?</h3>
michael@4 64 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Yes, but some work is needed on the Windows/OSX/Oracle computer to configure the authentication subsystem.</p>
michael@4 65 </div>
michael@4 66 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
michael@4 67 <h3>Can I log in to Unix/Linux?</h3>
michael@4 68 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Yes, by using PAM and it's quite easy.</p>
michael@4 69 </div>
michael@4 70 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
michael@4 71 <h3>What else can I do with it?</h3>
michael@4 72 <ol style="margin-top: 0.5em;">
michael@4 73 <li>Impress your friends</li>
michael@4 74 <li>VPN authentication</li>
michael@4 75 <li>Single sign on</li>
michael@4 76 <li>Remote access</li>
michael@4 77 <li>Computer login</li>
michael@4 78 <li>Disk encryption</li>
michael@4 79 <li>Internet services</li>
michael@4 80 <li>Systems integration</li>
michael@4 81 <li>CMS authentication</li>
michael@4 82 <li>Password management</li>
michael@4 83 <li>Email and money transfer</li>
michael@4 84 <li>Bank transaction validation</li>
michael@4 85 </ol>
michael@4 86 </div>
michael@4 87 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
michael@4 88 <h3>Can I install OTPWCalc on &hellip;?</h3>
michael@4 89 <ul style="margin-top: 0.5em;">
michael@4 90 <li>FirefoxOS: <strong>Yes</strong></li>
michael@4 91 <li>Sailfish: No</li>
michael@4 92 <li>Android: No</li>
michael@4 93 <li>Tizen: <strong>Yes</strong></li>
michael@4 94 <li>MeeGo: No</li>
michael@4 95 <li>Bada: No</li>
michael@4 96 <li>iOS: No</li>
michael@4 97 <li>Unix: No</li>
michael@4 98 <li>Linux: No</li>
michael@4 99 <li>Mac OSX: No</li>
michael@4 100 <li>BlackBerry QNX: No</li>
michael@4 101 <li>Windows Phone: <strong>Yes</strong></li>
michael@4 102 <li>Windows Store: <strong>Yes</strong></li>
michael@4 103 </ul>
michael@4 104 </div>
michael@4 105 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
michael@4 106 <h3>Why isn't OTPWCalc compatible?</h3>
michael@4 107 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">OTPWCalc might not be compatible with your platform of choice, usually because the necessary hardware isn't available to the author for development.</p>
michael@4 108 </div>
michael@4 109 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
michael@4 110 <h3>What happens to my password?</h3>
michael@4 111 <p style="margin-top: 0.25em;">Take a look at the entry point in
michael@4 112 <strong>main.js</strong>:</p>
michael@4 113 <code style="margin-left: 2em; display:inline-block; line-height: 120%;">
michael@4 114 var secr = $('#paswrd').val();<br />
michael@4 115 var resp = hash(secr, user, iter);
michael@4 116 </code>
michael@4 117 <p style="margin-bottom: 0.25em;">In other words, the password you enter is neither stored nor transmitted. In fact, OTPWCalc doesn't store or transmit any data input <strong>at all</strong> (see James Bond question later.) It's a <em>calculator</em> in the true sense, just like a pocket calculator that adds numbers.</p>
michael@4 118 </div>
michael@4 119 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
michael@4 120 <h3>Is OTPWCalc safe and secure?</h3>
michael@4 121 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">The algorithms of OTP have proven worthy of <strong>high security applications</strong>. OTPWCalc has been carefully designed and is tested thoroughly. It's both secure and safe to use.</p>
michael@4 122 </div>
michael@4 123 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
michael@4 124 <h3>Is it useful in a corporate setting?</h3>
michael@4 125 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Yes. Custom built enterprise versions are available accompanied with commercial support. Visit the <a href="//otpwcalc.europalab.com/">OTPWCalc homepage</a> for information.</p>
michael@4 126 </div>
michael@4 127 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
michael@4 128 <h3>Does James Bond use OTPWCalc?</h3>
michael@4 129 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Maybe, but spies probably just look over shoulders or use cameras to steal the static passwords used in OTP systems.</p>
michael@4 130 </div>
michael@4 131 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
michael@4 132 <h3>Same as Yubikey or RSA SecurID?</h3>
michael@4 133 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Yubikey, RSA SecurID, and OTPWCalc use similar technologies for similar applications, but OTPWCalc is strictly software and doesn't depend on the time or date.</p>
michael@4 134 </div>
michael@4 135 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
michael@4 136 <h3>How can I upgrade my OTPWCalc?</h3>
michael@4 137 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">This varies according to the operating system used so there's no single answer.</p>
michael@4 138 </div>
michael@4 139 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
michael@4 140 <h3>Who owns OTPWCalc?</h3>
michael@4 141 <p style="margin-top: 0.25em; margin-bottom: 0;">OTPWCalc is the property of the copyright holder, Michael Schloh von Bennewitz.</p>
michael@4 142 </div>
michael@4 143 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
michael@4 144 <h3>Is OTPWCalc licensed?</h3>
michael@4 145 <p style="margin-top: 0.25em; margin-bottom: 0;">OTPWCalc is distributed under the terms of the <a href="//joinup.ec.europa.eu/software/page/eupl/">European Union Public Licence</a>. This liberal license grants you freedom to use the software and much more.</p>
michael@4 146 </div>
michael@4 147 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
michael@4 148 <h3>Which programming language?</h3>
michael@4 149 <p style="margin-top: 0.25em; margin-bottom: 0;">OTPWCalc is built using the HTML, CSS, and JavaScript languages.</p>
michael@4 150 <p style="margin-top: 0.5em; margin-bottom: 0.25em;">The jQuery Mobile and Apache Cordova development frameworks provide important additional features.</p>
michael@4 151 </div>
michael@4 152 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
michael@4 153 <h3>What are ongoing developments?</h3>
michael@4 154 <p style="margin-top: 0.25em;">OTPWCalc is both active and stable, and follows a project management plan.</p>
michael@4 155 <ul>
michael@4 156 <li>It is undergoing i18n and l10n to several european languages.</li>
michael@4 157 <li style="margin-top: 0.5em;"><strong>HMAC</strong>-based RFC 4226 (HOTP) is being implemented.</li>
michael@4 158 <li style="margin-top: 0.5em;">Features like QR and OpenID integration are being explored.</li>
michael@4 159 <li style="margin-top: 0.5em;">Most of all, OTPWCalc is being <em>ported to new platforms</em>.</li>
michael@4 160 </ul>
michael@4 161 <p style="margin-top: 0.5em; margin-bottom: 0.25em;">To request features or pose questions please write to the <a href="//list.europalab.com/mailman/listinfo/otpwcalc/">mailing list</a>.</p>
michael@4 162 </div>
michael@4 163 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
michael@4 164 <h3>How can I report a bogue (bug)?</h3>
michael@4 165 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Please write to the <a href="//list.europalab.com/mailman/listinfo/otpwcalc/">mailing list</a> stating the OTPWCalc version and platform. Thanks for every bug report!</p>
michael@4 166 </div>
michael@4 167 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
michael@4 168 <h3>My question isn't answered,<br />or this is just not working!</h3>
michael@4 169 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Please turn to the <a href="//list.europalab.com/mailman/listinfo/otpwcalc/">mailing list</a> and ask for help there. Answers appear in a day.</p>
michael@4 170 </div>
michael@4 171 </div><!-- /content -->
michael@4 172 </div><!-- /page -->
michael@4 173 </body>
michael@4 174 </html>

mercurial