Tue, 30 Jul 2013 20:23:00 +0200
Updated jQuery libs, adjusted sources accordingly, and bumped version.
michael@4 | 1 | <!DOCTYPE html> |
michael@4 | 2 | <!-- |
michael@4 | 3 | OTPWCalc - One time password challenge response calculator client |
michael@4 | 4 | Copyright © 2013 Michael Schloh von Bennewitz <michael@schloh.com> |
michael@4 | 5 | |
michael@4 | 6 | OTPWCalc is free software: you can redistribute it and/or modify |
michael@4 | 7 | it under the terms of the European Union Public Licence, either |
michael@4 | 8 | version 1.1 of the license, or (at your option) any later version. |
michael@4 | 9 | |
michael@4 | 10 | OTPWCalc is distributed in the hope that it will be useful, |
michael@4 | 11 | but WITHOUT ANY WARRANTY; without even the implied warranty |
michael@4 | 12 | of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See |
michael@4 | 13 | the European Union Public License for more details. |
michael@4 | 14 | |
michael@4 | 15 | You should have received a copy of the European Union Public |
michael@4 | 16 | Licence along with OTPWCalc. If not, please refer to |
michael@4 | 17 | <http://joinup.ec.europa.eu/software/page/eupl/>. |
michael@4 | 18 | |
michael@4 | 19 | This file is part of project OTWPCalc, a one time password challenge |
michael@4 | 20 | response calculator client and is found at http://otpwcalc.europalab.com/ |
michael@4 | 21 | |
michael@4 | 22 | hfaq.html: W3C HTML implementation |
michael@4 | 23 | --> |
michael@4 | 24 | |
michael@4 | 25 | <html> |
michael@4 | 26 | <head> |
michael@4 | 27 | <meta charset="utf-8"> |
michael@4 | 28 | <meta name="viewport" content="width=device-width, initial-scale=1"> |
michael@4 | 29 | <title>OTPWCalc</title> |
michael@13 | 30 | <link rel="stylesheet" href="../jquery.mobile/jquery.mobile-1.3.2.min.css" /> |
michael@4 | 31 | <link rel="stylesheet" href="../main.css" /> |
michael@13 | 32 | <script src="../jquery.core/jquery-2.0.0.min.js"></script> |
michael@4 | 33 | <script src="help.js"></script> |
michael@13 | 34 | <script src="../jquery.mobile/jquery.mobile-1.3.2.min.js"></script> |
michael@4 | 35 | </head> |
michael@4 | 36 | <body> |
michael@4 | 37 | <!-- Data attributes reserved by JQuery Mobile: |
michael@4 | 38 | data-theme, data-ajax, data-filter, data-icon, data-grid, |
michael@4 | 39 | data-rel, data-icon, data-url, data-role, and data-type --> |
michael@4 | 40 | <!-- Also data-dom-cache="true" --> |
michael@4 | 41 | <div data-role="page" class="type-interior oc-swipage" id="faq"> |
michael@4 | 42 | <div data-role="header" data-id="headfaq"> |
michael@4 | 43 | <h1>OTPWCalc</h1> |
michael@4 | 44 | </div><!-- /header --> |
michael@4 | 45 | <div data-role="content"> |
michael@4 | 46 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d" data-inset="false" data-theme="c" data-content-theme="c"> |
michael@4 | 47 | <h3 style="margin-top: 0; margin-bottom: 0;">What is a One Time Password?</h3> |
michael@4 | 48 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">A One Time Password (OTP) is a password valid only for a <strong>single use</strong> and, once used, cannot be used again for authentication. OTPs avoid a number of shortcomings that are associated with traditional (static) passwords.</p> |
michael@4 | 49 | </div> |
michael@4 | 50 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
michael@4 | 51 | <h3>What can I do with this app?</h3> |
michael@4 | 52 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">This application serves one purpose only. It calculates and prints a OTP.</p> |
michael@4 | 53 | </div> |
michael@4 | 54 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
michael@4 | 55 | <h3>What can I do with OTPs?</h3> |
michael@4 | 56 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Most people use OTPs to log in to their website administration, CMS, or remote console.</p> |
michael@4 | 57 | </div> |
michael@4 | 58 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
michael@4 | 59 | <h3>Can I log into my Google account?</h3> |
michael@4 | 60 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">No. Google uses OTPs, but in a slightly nonstandard way. OTPWCalc cannot calculate OTPs useful for Google authentication yet.</p> |
michael@4 | 61 | </div> |
michael@4 | 62 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
michael@4 | 63 | <h3>Can I log in to Win/OSX/Oracle?</h3> |
michael@4 | 64 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Yes, but some work is needed on the Windows/OSX/Oracle computer to configure the authentication subsystem.</p> |
michael@4 | 65 | </div> |
michael@4 | 66 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
michael@4 | 67 | <h3>Can I log in to Unix/Linux?</h3> |
michael@4 | 68 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Yes, by using PAM and it's quite easy.</p> |
michael@4 | 69 | </div> |
michael@4 | 70 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
michael@4 | 71 | <h3>What else can I do with it?</h3> |
michael@4 | 72 | <ol style="margin-top: 0.5em;"> |
michael@4 | 73 | <li>Impress your friends</li> |
michael@4 | 74 | <li>VPN authentication</li> |
michael@4 | 75 | <li>Single sign on</li> |
michael@4 | 76 | <li>Remote access</li> |
michael@4 | 77 | <li>Computer login</li> |
michael@4 | 78 | <li>Disk encryption</li> |
michael@4 | 79 | <li>Internet services</li> |
michael@4 | 80 | <li>Systems integration</li> |
michael@4 | 81 | <li>CMS authentication</li> |
michael@4 | 82 | <li>Password management</li> |
michael@4 | 83 | <li>Email and money transfer</li> |
michael@4 | 84 | <li>Bank transaction validation</li> |
michael@4 | 85 | </ol> |
michael@4 | 86 | </div> |
michael@4 | 87 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
michael@4 | 88 | <h3>Can I install OTPWCalc on …?</h3> |
michael@4 | 89 | <ul style="margin-top: 0.5em;"> |
michael@4 | 90 | <li>FirefoxOS: <strong>Yes</strong></li> |
michael@4 | 91 | <li>Sailfish: No</li> |
michael@4 | 92 | <li>Android: No</li> |
michael@4 | 93 | <li>Tizen: <strong>Yes</strong></li> |
michael@4 | 94 | <li>MeeGo: No</li> |
michael@4 | 95 | <li>Bada: No</li> |
michael@4 | 96 | <li>iOS: No</li> |
michael@4 | 97 | <li>Unix: No</li> |
michael@4 | 98 | <li>Linux: No</li> |
michael@4 | 99 | <li>Mac OSX: No</li> |
michael@4 | 100 | <li>BlackBerry QNX: No</li> |
michael@4 | 101 | <li>Windows Phone: <strong>Yes</strong></li> |
michael@4 | 102 | <li>Windows Store: <strong>Yes</strong></li> |
michael@4 | 103 | </ul> |
michael@4 | 104 | </div> |
michael@4 | 105 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
michael@4 | 106 | <h3>Why isn't OTPWCalc compatible?</h3> |
michael@4 | 107 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">OTPWCalc might not be compatible with your platform of choice, usually because the necessary hardware isn't available to the author for development.</p> |
michael@4 | 108 | </div> |
michael@4 | 109 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
michael@4 | 110 | <h3>What happens to my password?</h3> |
michael@4 | 111 | <p style="margin-top: 0.25em;">Take a look at the entry point in |
michael@4 | 112 | <strong>main.js</strong>:</p> |
michael@4 | 113 | <code style="margin-left: 2em; display:inline-block; line-height: 120%;"> |
michael@4 | 114 | var secr = $('#paswrd').val();<br /> |
michael@4 | 115 | var resp = hash(secr, user, iter); |
michael@4 | 116 | </code> |
michael@4 | 117 | <p style="margin-bottom: 0.25em;">In other words, the password you enter is neither stored nor transmitted. In fact, OTPWCalc doesn't store or transmit any data input <strong>at all</strong> (see James Bond question later.) It's a <em>calculator</em> in the true sense, just like a pocket calculator that adds numbers.</p> |
michael@4 | 118 | </div> |
michael@4 | 119 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
michael@4 | 120 | <h3>Is OTPWCalc safe and secure?</h3> |
michael@4 | 121 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">The algorithms of OTP have proven worthy of <strong>high security applications</strong>. OTPWCalc has been carefully designed and is tested thoroughly. It's both secure and safe to use.</p> |
michael@4 | 122 | </div> |
michael@4 | 123 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
michael@4 | 124 | <h3>Is it useful in a corporate setting?</h3> |
michael@4 | 125 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Yes. Custom built enterprise versions are available accompanied with commercial support. Visit the <a href="//otpwcalc.europalab.com/">OTPWCalc homepage</a> for information.</p> |
michael@4 | 126 | </div> |
michael@4 | 127 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
michael@4 | 128 | <h3>Does James Bond use OTPWCalc?</h3> |
michael@4 | 129 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Maybe, but spies probably just look over shoulders or use cameras to steal the static passwords used in OTP systems.</p> |
michael@4 | 130 | </div> |
michael@4 | 131 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
michael@4 | 132 | <h3>Same as Yubikey or RSA SecurID?</h3> |
michael@4 | 133 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Yubikey, RSA SecurID, and OTPWCalc use similar technologies for similar applications, but OTPWCalc is strictly software and doesn't depend on the time or date.</p> |
michael@4 | 134 | </div> |
michael@4 | 135 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
michael@4 | 136 | <h3>How can I upgrade my OTPWCalc?</h3> |
michael@4 | 137 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">This varies according to the operating system used so there's no single answer.</p> |
michael@4 | 138 | </div> |
michael@4 | 139 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
michael@4 | 140 | <h3>Who owns OTPWCalc?</h3> |
michael@4 | 141 | <p style="margin-top: 0.25em; margin-bottom: 0;">OTPWCalc is the property of the copyright holder, Michael Schloh von Bennewitz.</p> |
michael@4 | 142 | </div> |
michael@4 | 143 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
michael@4 | 144 | <h3>Is OTPWCalc licensed?</h3> |
michael@4 | 145 | <p style="margin-top: 0.25em; margin-bottom: 0;">OTPWCalc is distributed under the terms of the <a href="//joinup.ec.europa.eu/software/page/eupl/">European Union Public Licence</a>. This liberal license grants you freedom to use the software and much more.</p> |
michael@4 | 146 | </div> |
michael@4 | 147 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
michael@4 | 148 | <h3>Which programming language?</h3> |
michael@4 | 149 | <p style="margin-top: 0.25em; margin-bottom: 0;">OTPWCalc is built using the HTML, CSS, and JavaScript languages.</p> |
michael@4 | 150 | <p style="margin-top: 0.5em; margin-bottom: 0.25em;">The jQuery Mobile and Apache Cordova development frameworks provide important additional features.</p> |
michael@4 | 151 | </div> |
michael@4 | 152 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
michael@4 | 153 | <h3>What are ongoing developments?</h3> |
michael@4 | 154 | <p style="margin-top: 0.25em;">OTPWCalc is both active and stable, and follows a project management plan.</p> |
michael@4 | 155 | <ul> |
michael@4 | 156 | <li>It is undergoing i18n and l10n to several european languages.</li> |
michael@4 | 157 | <li style="margin-top: 0.5em;"><strong>HMAC</strong>-based RFC 4226 (HOTP) is being implemented.</li> |
michael@4 | 158 | <li style="margin-top: 0.5em;">Features like QR and OpenID integration are being explored.</li> |
michael@4 | 159 | <li style="margin-top: 0.5em;">Most of all, OTPWCalc is being <em>ported to new platforms</em>.</li> |
michael@4 | 160 | </ul> |
michael@4 | 161 | <p style="margin-top: 0.5em; margin-bottom: 0.25em;">To request features or pose questions please write to the <a href="//list.europalab.com/mailman/listinfo/otpwcalc/">mailing list</a>.</p> |
michael@4 | 162 | </div> |
michael@4 | 163 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
michael@4 | 164 | <h3>How can I report a bogue (bug)?</h3> |
michael@4 | 165 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Please write to the <a href="//list.europalab.com/mailman/listinfo/otpwcalc/">mailing list</a> stating the OTPWCalc version and platform. Thanks for every bug report!</p> |
michael@4 | 166 | </div> |
michael@4 | 167 | <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
michael@4 | 168 | <h3>My question isn't answered,<br />or this is just not working!</h3> |
michael@4 | 169 | <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Please turn to the <a href="//list.europalab.com/mailman/listinfo/otpwcalc/">mailing list</a> and ask for help there. Answers appear in a day.</p> |
michael@4 | 170 | </div> |
michael@4 | 171 | </div><!-- /content --> |
michael@4 | 172 | </div><!-- /page --> |
michael@4 | 173 | </body> |
michael@4 | 174 | </html> |