Re: [tlug] webmail password protection?

[Josh Glover <jmglov@example.com>]

On 25/01/06, Edward Middleton <edward@example.com> wrote:

> > How do you protect your password when checking email via an untrusted
> > browser (like in an Internet cafe)?  None of the popular webmail
> > solutions seem to have one time password options.
>
> I think this goes like credit cards.  Have one you use for things that
> are a bit grey in the trust area, keep another for everything else.

To add to Edward's good idea, change the password of the "grey"
account from a trusted browser every time you have to use it in an
untrustworthy location.

Of course, that does not prevent someone from harvesting all the mail
they can grab from your untrusted account *before* you can get the
password changed back.

What about a proxy on your webserver that uses a one-time password?
Wouldn't that work?

-Josh