Any One-Time password system.

Alan DeKok aland at deployingradius.com
Thu May 16 14:54:45 CEST 2013


Sergii Bieliaievskyi wrote:
> This is so frustrating :( 
> How it can be possible to do strong security using reliable passwords
> and to have no encryption in the same time.

  I think you misunderstand the issues.

  OTP passwords were created so that it doesn't *require* that the
password be hidden.

  Systems like MSCHAP were created so that the passwords could be used
many times, because they're hashed.

  The two systems are *designed* to be incompatible.

  Alan DeKok.


More information about the Freeradius-Users mailing list