As you mentioned in the article, I already have number generator for eTrade. I can foresee the day when I would have several of these fobs (I have hundreds of passwords). The eTrade fob is not labeled and the paypal fob might not be either, you didn't say. Since both paypal and eTrade use the RSA generator, can the same fob be used at both sites? Or will some smart company like Roboform have to develop a program to help us manage these fobs? Wouldn't it be better if paypal and all the rest used a central authenticator, such as https://www.myopenid.com/ so that we would only require one token?

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/newsbriefs/528/2001#2001