Delivery-Date: Sun, 12 Jun 2016 10:23:35 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 required=5.0 tests=BAYES_00,FREEMAIL_FROM,
	RCVD_IN_DNSWL_MED,T_RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [138.201.14.202])
	(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id DE6D71E07F2;
	Sun, 12 Jun 2016 10:23:33 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id A6539E0676;
	Sun, 12 Jun 2016 14:23:11 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 21FB9E02A0
 for <tor-talk@lists.torproject.org>; Sun, 12 Jun 2016 14:23:05 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id pYHF1jebARW7 for <tor-talk@lists.torproject.org>;
 Sun, 12 Jun 2016 14:23:04 +0000 (UTC)
Received: from vfemail.net (onethreetwo.vfemail.net [199.16.11.132])
 (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))
 (Client did not present a certificate)
 by eugeni.torproject.org (Postfix) with ESMTPS id 93F75E0261
 for <tor-talk@lists.torproject.org>; Sun, 12 Jun 2016 14:23:03 +0000 (UTC)
Received: (qmail 83144 invoked by uid 89); 12 Jun 2016 14:22:59 -0000
Received: from localhost (HELO freequeue.vfemail.net) (127.0.0.1)
 by localhost with (DHE-RSA-AES256-SHA encrypted) SMTP;
 12 Jun 2016 14:22:57 -0000
Received: (qmail 15933 invoked by uid 89); 12 Jun 2016 00:00:04 -0000
Received: by simscan 1.3.1 ppid: 15931, pid: 15932, t: 0.0023s scanners:none
Received: from unknown (HELO smtp102-2.vfemail.net) (172.16.100.62)
 by FreeQueue with SMTP; 12 Jun 2016 00:00:04 -0000
Received: (qmail 22996 invoked by uid 89); 12 Jun 2016 00:00:04 -0000
Received: by simscan 1.4.0 ppid: 22962, pid: 22993, t: 0.6744s scanners:none
Received: from unknown (HELO 127.0.0.1)
 (bXJub2JvZHlAbWFpbC1vbi51cw==@85.248.227.163)
 by mail.vfemail.net with ESMTPA; 12 Jun 2016 00:00:04 -0000
To: tor-talk@lists.torproject.org
References: <628503859.269573.1465631907944.JavaMail.ngmail@webmail17.arcor-online.net>
From: Mr Nobody <mrnobody@mail-on.us>
Message-ID: <575CA5D0.70507@mail-on.us>
Date: Sat, 11 Jun 2016 23:59:12 +0000
MIME-Version: 1.0
In-Reply-To: <628503859.269573.1465631907944.JavaMail.ngmail@webmail17.arcor-online.net>
X-Content-Filtered-By: Mailman/MimeDel 2.1.18
Subject: Re: [tor-talk] Tor-Friendly Two-Factor Authentication?
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Reply-To: tor-talk@lists.torproject.org
Content-Type: multipart/mixed; boundary="===============4113011566101337580=="
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============4113011566101337580==
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="dpgMFGbBiQrMiQcVHW5aHXGBwm2ERLT70"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--dpgMFGbBiQrMiQcVHW5aHXGBwm2ERLT70
From: Mr Nobody <mrnobody@mail-on.us>
To: tor-talk@lists.torproject.org
Message-ID: <575CA5D0.70507@mail-on.us>
Subject: Re: [tor-talk] Tor-Friendly Two-Factor Authentication?
References: <628503859.269573.1465631907944.JavaMail.ngmail@webmail17.arcor-online.net>
In-Reply-To: <628503859.269573.1465631907944.JavaMail.ngmail@webmail17.arcor-online.net>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

As far as I know, to implement 2 factor authentication in terms of the
codes that many websites have, the only thing you need is to generate
random numbers coming from seed that the webpage/bank you want to
authenticate to know. This simple setup by no means need to be privacy
invading.

tor_talk@arcor.de:
> Hi Tor Talkers and Scott Arciszewski,
>
> you wrote:
> I was curious if anyone in/around Tor was aware of any
> privacy-preserving 2FA initiatives.
>
>
>
> maybe banks are
> https://en.wikipedia.org/wiki/Mtan#Mobile_TAN_.28mTAN.29
>
> when you have to log in to your phone/handy with e. g. a "living" finge=
rprint it is equal to a mTan generator in which you insert a card and hol=
d it to the blinking strings of a bar code at a display to get the calcul=
ation done.

--=20
http://tornews3zbdhuan5.onion



--dpgMFGbBiQrMiQcVHW5aHXGBwm2ERLT70
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQIcBAEBCgAGBQJXXKX5AAoJEM5e1veuAI5DOGsQAK5d1rS40sSp/e87nDeyHix7
sZB+hZNW3w7RBmQgT+F7jvfQRLpDNTBc8gV2fLmixrHCH4G9UVB3eQEf+dhXrAmg
nPrC9/VfpMZps33AQ31da1J58tgwvFUZ2YKlcoFG1d2Z1yfMLQipZTmIMsgtDy8i
zEGWOd4hJ2YvQveDJEOA+jV7f0v9kl0NXVthqYAD89keJXvSLIvRrqyQotWt0ra9
KjQhDQwoFwqvJp5L22TQG8BZQ70YGFW+kLhpbmTRkuf5E7r2hYprKxRhoFr5qRd5
epweEY1Lk28ilnysXxQDmgg93gds7bVDSIMGDpDJ060ThqkVZ124IsOvyuHfH/KL
K6VouUGFnac9T33lQbsTqXLkWOvHAyX9FGnPoXu8/Hw1swZsr7Z5pkCe8kXKEJCx
Gkm24amrvk+yubzNm/8MhHS16buqxFG9WuiMZ5Za/Av2LNXqflIa4els3FabveoA
m0t+P7ZbCRPisCDKpihU6aE+jB253gZpSRFiXYSJ2Zn2Scg2FoAqrduzhu1pYjOF
sWOAGppThSWqRP0Acvr+D2DVa/7OMiQcHcv9XLpvNBSKyt/dX8SO6v4hZctX1Bab
kdbsCBrctVlbgoGUFW6ms3KTxUByEVteYPArHMh0yFr28xjYoAR4qz8cs8d443f8
cvrlMbBK36+RKjLKgqe3
=DFU+
-----END PGP SIGNATURE-----

--dpgMFGbBiQrMiQcVHW5aHXGBwm2ERLT70--

--===============4113011566101337580==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

LS0gCnRvci10YWxrIG1haWxpbmcgbGlzdCAtIHRvci10YWxrQGxpc3RzLnRvcnByb2plY3Qub3Jn
ClRvIHVuc3Vic2NyaWJlIG9yIGNoYW5nZSBvdGhlciBzZXR0aW5ncyBnbyB0bwpodHRwczovL2xp
c3RzLnRvcnByb2plY3Qub3JnL2NnaS1iaW4vbWFpbG1hbi9saXN0aW5mby90b3ItdGFsawo=

--===============4113011566101337580==--

