
01-15-2012, 09:57 AM
|
 |
|
|
Join Date: Jun 2010
Posts: 53
Благодарил(а): 0 раз(а)
Поблагодарили:
0 раз(а) в 0 сообщениях
|
|
Quote:
Originally Posted by Rich
I am trying to figure out where you are going with this other than as a means to get a few bucks in your pocket. When you say it increases site security, what exactly do you mean and how exactly does it make the site more secure. I am always interested in making my site more secure but I don't understand how this will do that since the description doesn't say much.
|
When this is enabled and you login, it comes up with a prompt to enter your second authentication option. Here you must enter a second password which is AES encrypted in the database after being hashed, this eliminates the risk of MySQL injection getting the second password and makes it much harder for a hacker to get into your site (practically impossible unless keylogged).
If you have the pro version, the email one-time password will send you a 6-digit code that you must enter at the prompt to login, this code changes at ever login. The YubiKey option uses the keys found at http://yubico.com to authenticate you, this is the most secure as you must have the actual key.
|