1.1 --- /dev/null Thu Jan 01 00:00:00 1970 +0000
1.2 +++ b/src/firefoxos/help/hfaq.html Fri Apr 26 19:10:52 2013 +0200
1.3 @@ -0,0 +1,174 @@
1.4 +<!DOCTYPE html>
1.5 +<!--
1.6 +OTPWCalc - One time password challenge response calculator client
1.7 +Copyright © 2013 Michael Schloh von Bennewitz <michael@schloh.com>
1.8 +
1.9 +OTPWCalc is free software: you can redistribute it and/or modify
1.10 +it under the terms of the European Union Public Licence, either
1.11 +version 1.1 of the license, or (at your option) any later version.
1.12 +
1.13 +OTPWCalc is distributed in the hope that it will be useful,
1.14 +but WITHOUT ANY WARRANTY; without even the implied warranty
1.15 +of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
1.16 +the European Union Public License for more details.
1.17 +
1.18 +You should have received a copy of the European Union Public
1.19 +Licence along with OTPWCalc. If not, please refer to
1.20 +<http://joinup.ec.europa.eu/software/page/eupl/>.
1.21 +
1.22 +This file is part of project OTWPCalc, a one time password challenge
1.23 +response calculator client and is found at http://otpwcalc.europalab.com/
1.24 +
1.25 +hfaq.html: W3C HTML implementation
1.26 +-->
1.27 +
1.28 +<html>
1.29 + <head>
1.30 + <meta charset="utf-8">
1.31 + <meta name="viewport" content="width=device-width, initial-scale=1">
1.32 + <title>OTPWCalc</title>
1.33 + <link rel="stylesheet" href="../jquery.mobile/jquery.mobile-1.3.1.min.css" />
1.34 + <link rel="stylesheet" href="../main.css" />
1.35 + <script src="../jquery.core/jquery-1.9.1.js"></script>
1.36 + <script src="help.js"></script>
1.37 + <script src="../jquery.mobile/jquery.mobile-1.3.1.min.js"></script>
1.38 + </head>
1.39 + <body>
1.40 + <!-- Data attributes reserved by JQuery Mobile:
1.41 + data-theme, data-ajax, data-filter, data-icon, data-grid,
1.42 + data-rel, data-icon, data-url, data-role, and data-type -->
1.43 + <!-- Also data-dom-cache="true" -->
1.44 + <div data-role="page" class="type-interior oc-swipage" id="faq">
1.45 + <div data-role="header" data-id="headfaq">
1.46 + <h1>OTPWCalc</h1>
1.47 + </div><!-- /header -->
1.48 + <div data-role="content">
1.49 + <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d" data-inset="false" data-theme="c" data-content-theme="c">
1.50 + <h3 style="margin-top: 0; margin-bottom: 0;">What is a One Time Password?</h3>
1.51 + <p style="margin-top: 0.25em; margin-bottom: 0.25em;">A One Time Password (OTP) is a password valid only for a <strong>single use</strong> and, once used, cannot be used again for authentication. OTPs avoid a number of shortcomings that are associated with traditional (static) passwords.</p>
1.52 + </div>
1.53 + <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
1.54 + <h3>What can I do with this app?</h3>
1.55 + <p style="margin-top: 0.25em; margin-bottom: 0.25em;">This application serves one purpose only. It calculates and prints a OTP.</p>
1.56 + </div>
1.57 + <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
1.58 + <h3>What can I do with OTPs?</h3>
1.59 + <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Most people use OTPs to log in to their website administration, CMS, or remote console.</p>
1.60 + </div>
1.61 + <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
1.62 + <h3>Can I log into my Google account?</h3>
1.63 + <p style="margin-top: 0.25em; margin-bottom: 0.25em;">No. Google uses OTPs, but in a slightly nonstandard way. OTPWCalc cannot calculate OTPs useful for Google authentication yet.</p>
1.64 + </div>
1.65 + <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
1.66 + <h3>Can I log in to Win/OSX/Oracle?</h3>
1.67 + <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Yes, but some work is needed on the Windows/OSX/Oracle computer to configure the authentication subsystem.</p>
1.68 + </div>
1.69 + <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
1.70 + <h3>Can I log in to Unix/Linux?</h3>
1.71 + <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Yes, by using PAM and it's quite easy.</p>
1.72 + </div>
1.73 + <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
1.74 + <h3>What else can I do with it?</h3>
1.75 + <ol style="margin-top: 0.5em;">
1.76 + <li>Impress your friends</li>
1.77 + <li>VPN authentication</li>
1.78 + <li>Single sign on</li>
1.79 + <li>Remote access</li>
1.80 + <li>Computer login</li>
1.81 + <li>Disk encryption</li>
1.82 + <li>Internet services</li>
1.83 + <li>Systems integration</li>
1.84 + <li>CMS authentication</li>
1.85 + <li>Password management</li>
1.86 + <li>Email and money transfer</li>
1.87 + <li>Bank transaction validation</li>
1.88 + </ol>
1.89 + </div>
1.90 + <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
1.91 + <h3>Can I install OTPWCalc on …?</h3>
1.92 + <ul style="margin-top: 0.5em;">
1.93 + <li>FirefoxOS: <strong>Yes</strong></li>
1.94 + <li>Sailfish: No</li>
1.95 + <li>Android: No</li>
1.96 + <li>Tizen: <strong>Yes</strong></li>
1.97 + <li>MeeGo: No</li>
1.98 + <li>Bada: No</li>
1.99 + <li>iOS: No</li>
1.100 + <li>Unix: No</li>
1.101 + <li>Linux: No</li>
1.102 + <li>Mac OSX: No</li>
1.103 + <li>BlackBerry QNX: No</li>
1.104 + <li>Windows Phone: <strong>Yes</strong></li>
1.105 + <li>Windows Store: <strong>Yes</strong></li>
1.106 + </ul>
1.107 + </div>
1.108 + <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
1.109 + <h3>Why isn't OTPWCalc compatible?</h3>
1.110 + <p style="margin-top: 0.25em; margin-bottom: 0.25em;">OTPWCalc might not be compatible with your platform of choice, usually because the necessary hardware isn't available to the author for development.</p>
1.111 + </div>
1.112 + <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
1.113 + <h3>What happens to my password?</h3>
1.114 + <p style="margin-top: 0.25em;">Take a look at the entry point in
1.115 + <strong>main.js</strong>:</p>
1.116 + <code style="margin-left: 2em; display:inline-block; line-height: 120%;">
1.117 + var secr = $('#paswrd').val();<br />
1.118 + var resp = hash(secr, user, iter);
1.119 + </code>
1.120 + <p style="margin-bottom: 0.25em;">In other words, the password you enter is neither stored nor transmitted. In fact, OTPWCalc doesn't store or transmit any data input <strong>at all</strong> (see James Bond question later.) It's a <em>calculator</em> in the true sense, just like a pocket calculator that adds numbers.</p>
1.121 + </div>
1.122 + <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
1.123 + <h3>Is OTPWCalc safe and secure?</h3>
1.124 + <p style="margin-top: 0.25em; margin-bottom: 0.25em;">The algorithms of OTP have proven worthy of <strong>high security applications</strong>. OTPWCalc has been carefully designed and is tested thoroughly. It's both secure and safe to use.</p>
1.125 + </div>
1.126 + <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
1.127 + <h3>Is it useful in a corporate setting?</h3>
1.128 + <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Yes. Custom built enterprise versions are available accompanied with commercial support. Visit the <a href="//otpwcalc.europalab.com/">OTPWCalc homepage</a> for information.</p>
1.129 + </div>
1.130 + <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
1.131 + <h3>Does James Bond use OTPWCalc?</h3>
1.132 + <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Maybe, but spies probably just look over shoulders or use cameras to steal the static passwords used in OTP systems.</p>
1.133 + </div>
1.134 + <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
1.135 + <h3>Same as Yubikey or RSA SecurID?</h3>
1.136 + <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Yubikey, RSA SecurID, and OTPWCalc use similar technologies for similar applications, but OTPWCalc is strictly software and doesn't depend on the time or date.</p>
1.137 + </div>
1.138 + <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
1.139 + <h3>How can I upgrade my OTPWCalc?</h3>
1.140 + <p style="margin-top: 0.25em; margin-bottom: 0.25em;">This varies according to the operating system used so there's no single answer.</p>
1.141 + </div>
1.142 + <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
1.143 + <h3>Who owns OTPWCalc?</h3>
1.144 + <p style="margin-top: 0.25em; margin-bottom: 0;">OTPWCalc is the property of the copyright holder, Michael Schloh von Bennewitz.</p>
1.145 + </div>
1.146 + <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
1.147 + <h3>Is OTPWCalc licensed?</h3>
1.148 + <p style="margin-top: 0.25em; margin-bottom: 0;">OTPWCalc is distributed under the terms of the <a href="//joinup.ec.europa.eu/software/page/eupl/">European Union Public Licence</a>. This liberal license grants you freedom to use the software and much more.</p>
1.149 + </div>
1.150 + <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
1.151 + <h3>Which programming language?</h3>
1.152 + <p style="margin-top: 0.25em; margin-bottom: 0;">OTPWCalc is built using the HTML, CSS, and JavaScript languages.</p>
1.153 + <p style="margin-top: 0.5em; margin-bottom: 0.25em;">The jQuery Mobile and Apache Cordova development frameworks provide important additional features.</p>
1.154 + </div>
1.155 + <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
1.156 + <h3>What are ongoing developments?</h3>
1.157 + <p style="margin-top: 0.25em;">OTPWCalc is both active and stable, and follows a project management plan.</p>
1.158 + <ul>
1.159 + <li>It is undergoing i18n and l10n to several european languages.</li>
1.160 + <li style="margin-top: 0.5em;"><strong>HMAC</strong>-based RFC 4226 (HOTP) is being implemented.</li>
1.161 + <li style="margin-top: 0.5em;">Features like QR and OpenID integration are being explored.</li>
1.162 + <li style="margin-top: 0.5em;">Most of all, OTPWCalc is being <em>ported to new platforms</em>.</li>
1.163 + </ul>
1.164 + <p style="margin-top: 0.5em; margin-bottom: 0.25em;">To request features or pose questions please write to the <a href="//list.europalab.com/mailman/listinfo/otpwcalc/">mailing list</a>.</p>
1.165 + </div>
1.166 + <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
1.167 + <h3>How can I report a bogue (bug)?</h3>
1.168 + <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Please write to the <a href="//list.europalab.com/mailman/listinfo/otpwcalc/">mailing list</a> stating the OTPWCalc version and platform. Thanks for every bug report!</p>
1.169 + </div>
1.170 + <div data-role="collapsible" data-inset="false" data-theme="c" data-content-theme="d">
1.171 + <h3>My question isn't answered,<br />or this is just not working!</h3>
1.172 + <p style="margin-top: 0.25em; margin-bottom: 0.25em;">Please turn to the <a href="//list.europalab.com/mailman/listinfo/otpwcalc/">mailing list</a> and ask for help there. Answers appear in a day.</p>
1.173 + </div>
1.174 + </div><!-- /content -->
1.175 + </div><!-- /page -->
1.176 +</body>
1.177 +</html>
