Re: Cryptocard

Travis Watson <[email protected]>
Newsgroups gmane.comp.security.vpn
Message-ID <[email protected]>
Rudi,

I have precisely 0 experience with cryptocard, but you
may well want to look at Safeword also
(http://www.securecomputing.com/).  It's a great
product and a great company--though they probably have
the absolute worst marketing department in all of IT. 
Very often no one has heard of them even though there
are millions of their tokens out there.  The long-term
cost savings are huge, it's more stable, more secure,
the tokens last forever, it's easier to use, and they
have global support.  The biggest plus to me is that
Safeword is peer-to-peer vs. master-slave like RSA. 
With SecureID, if the master goes down, you are
positively screwed.  And keeping the timesync between
the the master and all it's slaves can be a nightmare
(and the timedrift makes it less secure as
well--different discussion though).  With a
peer-to-peer setup, you can throw a bunch of cheap
hardware at it and if 2 or 3 servers go down, you are
still alive.  I don't know if cryptocard is
peer-to-peer or master-slave (Joel, can you answer
this for us, please?), but I would be nervous about a
master-slave setup if that's what it is.

I'll put it to you this way: without naming names,
"the largest European re-seller of RSA tokens" uses
Safeword internally.  They love to resell RSA because
it's a cash cow, but they don't want to spend the
money themselves.

This is not to dismiss cryptocard--it may well be a
fine product as well--and I realize that I'm not
answering your question directly, but I thought I
would mention other options.  The more competition,
the better, right?  

Good luck.

--Willie


--- Rudi Pierquin <[email protected]> wrote:
> Hi,
> 
> I am wandering if some people on this forum have
> already tried a product called Cryptocard as an
> authentication scheme. I tried it, and it works
> pretty
> well, but i want to know if somebody can tell me
> about
> experience with this product in a production
> environment. This could help me to evaluate it
> against
> other products like RSA or Vasco in terms of
> reliability.
> 
> Many thanks !
> 
> Rudi
> 
>
___________________________________________________________
> Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et
> en français !
> Yahoo! Mail : http://fr.mail.yahoo.com
> _______________________________________________
> VPN mailing list
> [email protected]
> http://lists.shmoo.com/mailman/listinfo/vpn
> 

__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.