Hi all,
Just a quick question and as the title suggest, what’s your experience with banking apps behind NYM ? I’ve got mixed results, with some simply not starting at all or refusing known good credentials while some other just works all fine.
Thanks for any feedback,
sn
On my banking app it works very well, but all in all the connection over nym has not an big advance, cause ur connection is still encrypted, and the bank already know u.
So yes theoretically its possible over an software bug, but the crypto part is on an well matured app separated, so its more an threat which could happen from an user by accident more likely as an flaw in an crypto module.
regards
Hey there MJ – thanks for your update – in fact I’ve been wondering if some institutions may use things like risk-based authentication in which your endpoint IP may count – which I find totally stupid and defeating internet design principles – though how this is fingerprinted remains interesting as this can most certainly be circumvented =)
Yes i think may it can be, but i doubt that Banking Institutes are having so an aggressive approach on egress like Paypal etc.
Cause the authentication is more likely focused on crypto and an good auth. mechanism or at least should be.
And some Banking apps, register this also and ask the user that an suspicious or new ip is used.
But may im wrong on some parts, cause i’m not an real Banking Expert ; ) .
regards