|
1 <!DOCTYPE html> |
|
2 <!-- |
|
3 OTPWCalc - One time password challenge response calculator client |
|
4 Copyright © 2013 Michael Schloh von Bennewitz <michael@schloh.com> |
|
5 |
|
6 OTPWCalc is free software: you can redistribute it and/or modify |
|
7 it under the terms of the European Union Public Licence, either |
|
8 version 1.1 of the license, or (at your option) any later version. |
|
9 |
|
10 OTPWCalc is distributed in the hope that it will be useful, |
|
11 but WITHOUT ANY WARRANTY; without even the implied warranty |
|
12 of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See |
|
13 the European Union Public License for more details. |
|
14 |
|
15 You should have received a copy of the European Union Public |
|
16 Licence along with OTPWCalc. If not, please refer to |
|
17 <http://joinup.ec.europa.eu/software/page/eupl/>. |
|
18 |
|
19 This file is part of project OTWPCalc, a one time password challenge |
|
20 response calculator client and is found at http://otpwcalc.europalab.com/ |
|
21 |
|
22 hfaq.html: W3C HTML implementation |
|
23 --> |
|
24 |
|
25 <html> |
|
26 <head> |
|
27 <meta charset="utf-8"> |
|
28 <meta name="viewport" content="width=device-width, initial-scale=1"> |
|
29 <title>OTPWCalc</title> |
|
30 <link rel="stylesheet" href="../css/jquery.mobile-1.3.2.min.css" /> |
|
31 <link rel="stylesheet" href="../main.css" /> |
|
32 <script src="../js/jquery-2.0.0.min.js"></script> |
|
33 <script src="help.js"></script> |
|
34 <script src="../js/jquery.mobile-1.3.2.min.js"></script> |
|
35 </head> |
|
36 <body> |
|
37 <!-- Data attributes reserved by JQuery Mobile: |
|
38 data-theme, data-ajax, data-filter, data-icon, data-grid, |
|
39 data-rel, data-icon, data-url, data-role, and data-type --> |
|
40 <!-- Also data-dom-cache="true" --> |
|
41 <div data-role="page" class="type-interior oc-swipage" id="faq"> |
|
42 <div data-role="header" data-id="headfaq"> |
|
43 <h1>OTPWCalc</h1> |
|
44 </div><!-- /header --> |
|
45 <div data-role="content"> |
|
46 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d" data-inset="false" data-theme="c" data-content-theme="c"> |
|
47 <h3 style="margin-top: 0; margin-bottom: 0;">What is a One Time Password?</h3> |
|
48 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">A One Time Password (OTP) is a password valid only for a <strong>single use</strong> and, once used, cannot be used again for authentication. OTPs avoid a number of shortcomings that are associated with traditional (static) passwords.</p> |
|
49 </div> |
|
50 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
|
51 <h3>What can I do with this app?</h3> |
|
52 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">This application serves one purpose only. It calculates and prints a OTP.</p> |
|
53 </div> |
|
54 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
|
55 <h3>What can I do with OTPs?</h3> |
|
56 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Most people use OTPs to log in to their website administration, CMS, or remote console.</p> |
|
57 </div> |
|
58 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
|
59 <h3>Can I log into my Google account?</h3> |
|
60 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">No. Google uses OTPs, but in a slightly nonstandard way. OTPWCalc cannot calculate OTPs useful for Google authentication yet.</p> |
|
61 </div> |
|
62 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
|
63 <h3>Can I log in to Win/OSX/Oracle?</h3> |
|
64 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Yes, but some work is needed on the Windows/OSX/Oracle computer to configure the authentication subsystem.</p> |
|
65 </div> |
|
66 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
|
67 <h3>Can I log in to Unix/Linux?</h3> |
|
68 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Yes, by using PAM and it's quite easy.</p> |
|
69 </div> |
|
70 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
|
71 <h3>What else can I do with it?</h3> |
|
72 <ol style="margin-top: 0.5em;"> |
|
73 <li>Impress your friends</li> |
|
74 <li>VPN authentication</li> |
|
75 <li>Single sign on</li> |
|
76 <li>Remote access</li> |
|
77 <li>Computer login</li> |
|
78 <li>Disk encryption</li> |
|
79 <li>Internet services</li> |
|
80 <li>Systems integration</li> |
|
81 <li>CMS authentication</li> |
|
82 <li>Password management</li> |
|
83 <li>Email and money transfer</li> |
|
84 <li>Bank transaction validation</li> |
|
85 </ol> |
|
86 </div> |
|
87 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
|
88 <h3>Can I install OTPWCalc on …?</h3> |
|
89 <ul style="margin-top: 0.5em;"> |
|
90 <li>FirefoxOS: <strong>Yes</strong></li> |
|
91 <li>Sailfish: No</li> |
|
92 <li>Android: No</li> |
|
93 <li>Tizen: <strong>Yes</strong></li> |
|
94 <li>MeeGo: No</li> |
|
95 <li>Bada: No</li> |
|
96 <li>iOS: No</li> |
|
97 <li>Unix: No</li> |
|
98 <li>Linux: No</li> |
|
99 <li>Mac OSX: No</li> |
|
100 <li>BlackBerry QNX: No</li> |
|
101 <li>Windows Phone: <strong>Yes</strong></li> |
|
102 <li>Windows Store: <strong>Yes</strong></li> |
|
103 </ul> |
|
104 </div> |
|
105 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
|
106 <h3>Why isn't OTPWCalc compatible?</h3> |
|
107 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">OTPWCalc might not be compatible with your platform of choice, usually because the necessary hardware isn't available to the author for development.</p> |
|
108 </div> |
|
109 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
|
110 <h3>What happens to my password?</h3> |
|
111 <p style="margin-top: 0.25em;">Take a look at the entry point in |
|
112 <strong>main.js</strong>:</p> |
|
113 <code style="margin-left: 2em; display:inline-block; line-height: 120%;"> |
|
114 var secr = $('#paswrd').val();<br /> |
|
115 var resp = hash(secr, user, iter); |
|
116 </code> |
|
117 <p style="margin-bottom: 0.25em;">In other words, the password you enter is neither stored nor transmitted. In fact, OTPWCalc doesn't store or transmit any data input <strong>at all</strong> (see James Bond question later.) It's a <em>calculator</em> in the true sense, just like a pocket calculator that adds numbers.</p> |
|
118 </div> |
|
119 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
|
120 <h3>Is OTPWCalc safe and secure?</h3> |
|
121 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">The algorithms of OTP have proven worthy of <strong>high security applications</strong>. OTPWCalc has been carefully designed and is tested thoroughly. It's both secure and safe to use.</p> |
|
122 </div> |
|
123 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
|
124 <h3>Is it useful in a corporate setting?</h3> |
|
125 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Yes. Custom built enterprise versions are available accompanied with commercial support. Visit the <a href="http://otpwcalc.europalab.com/">OTPWCalc homepage</a> for information.</p> |
|
126 </div> |
|
127 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
|
128 <h3>Does James Bond use OTPWCalc?</h3> |
|
129 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Maybe, but spies probably just look over shoulders or use cameras to steal the static passwords used in OTP systems.</p> |
|
130 </div> |
|
131 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
|
132 <h3>Same as Yubikey or RSA SecurID?</h3> |
|
133 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Yubikey, RSA SecurID, and OTPWCalc use similar technologies for similar applications, but OTPWCalc is strictly software and doesn't depend on the time or date.</p> |
|
134 </div> |
|
135 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
|
136 <h3>How can I upgrade my OTPWCalc?</h3> |
|
137 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">This varies according to the operating system used so there's no single answer.</p> |
|
138 </div> |
|
139 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
|
140 <h3>Who owns OTPWCalc?</h3> |
|
141 <p style="margin-top: 0.25em; margin-bottom: 0;">OTPWCalc is the property of the copyright holder, Michael Schloh von Bennewitz.</p> |
|
142 </div> |
|
143 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
|
144 <h3>Is OTPWCalc licensed?</h3> |
|
145 <p style="margin-top: 0.25em; margin-bottom: 0;">OTPWCalc is distributed under the terms of the <a href="http://joinup.ec.europa.eu/software/page/eupl/">European Union Public Licence</a>. This liberal license grants you freedom to use the software and much more.</p> |
|
146 </div> |
|
147 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
|
148 <h3>Which programming language?</h3> |
|
149 <p style="margin-top: 0.25em; margin-bottom: 0;">OTPWCalc is built using the HTML, CSS, and JavaScript languages.</p> |
|
150 <p style="margin-top: 0.5em; margin-bottom: 0.25em;">The jQuery Mobile and Apache Cordova development frameworks provide important additional features.</p> |
|
151 </div> |
|
152 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
|
153 <h3>What are ongoing developments?</h3> |
|
154 <p style="margin-top: 0.25em;">OTPWCalc is both active and stable, and follows a project management plan.</p> |
|
155 <ul> |
|
156 <li>It is undergoing i18n and l10n to several european languages.</li> |
|
157 <li style="margin-top: 0.5em;"><strong>HMAC</strong>-based RFC 4226 (HOTP) is being implemented.</li> |
|
158 <li style="margin-top: 0.5em;">Features like QR and OpenID integration are being explored.</li> |
|
159 <li style="margin-top: 0.5em;">Most of all, OTPWCalc is being <em>ported to new platforms</em>.</li> |
|
160 </ul> |
|
161 <p style="margin-top: 0.5em; margin-bottom: 0.25em;">To request features or pose questions please write to the <a href="http://list.europalab.com/mailman/listinfo/otpwcalc/">mailing list</a>.</p> |
|
162 </div> |
|
163 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
|
164 <h3>How can I report a bogue (bug)?</h3> |
|
165 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Please write to the <a href="http://list.europalab.com/mailman/listinfo/otpwcalc/">mailing list</a> stating the OTPWCalc version and platform. Thanks for every bug report!</p> |
|
166 </div> |
|
167 <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d"> |
|
168 <h3>My question isn't answered,<br />or this is just not working!</h3> |
|
169 <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Please turn to the <a href="http://list.europalab.com/mailman/listinfo/otpwcalc/">mailing list</a> and ask for help there. Answers appear in a day.</p> |
|
170 </div> |
|
171 </div><!-- /content --> |
|
172 </div><!-- /page --> |
|
173 </body> |
|
174 </html> |