Does the communication between my PC and the BioSignID authentication web service secured?
BioSignID virtual-pad opens SSL secured direct connection with the BioSignID authentication server based on pre-defined known certificates. This model imitates VPN connection within the web browser from the user endpoint PC to the authentication server. BioSignID connection is highly secured in order to protect against any attempt to steal the user identity over the web. This way cyber attacks such as MITM (Man-In-The-Middle) attacks, SSL-Sniff are eliminated. MITM attacks are used widely by hackers in order to hijack users’ identity (usernames and passwords) in Wi-Fi public and private networks. Other cyber attacks are eliminated as well; any attempt to translate the connection from HTTPS protocol to plain text, unsecured HTTP protocol will close the connection immediately. This way BioSignID challenges the most severe cyber attack is known as SSL-Strip attack. To protect against phishing attacks, BioSignID implements parallel connection between the user’s mobile device (iPhone device
