How does BioSignID protect against cyber attacks such as: SSL-Strip, SSL-Sniff and Chain-Certificates attacks?
BioSignID solution works as an internal VPN connection within the web browser in order to secure the connection between the endpoint users’s PC and the authorized authentication server. This is any attempt to attack the BioSignID session using MITM (Man-In-The-Middle) are recognized and blocked. BioSignID cannot work under fake certificate. The data must be sent securely directly to the BioSignID authentication server. The data cannot be translated from Https to http plain text as it is being implemented in the SSL-Strip attacks. BioSignID solution challenges the phishing attacks by redirecting the signing-in transaction to mobiles such as iPhone.
