Assurance

["Cantor, Scott" <>]

On 3/11/14, 3:20 AM, "Jones, Mark B" 
<>
 wrote:
>
>As far as the original question.  It seems to me that MFA is a good
>defense.

Then I think you misunderstand the question, it's the exact scenario where
typical OTP approaches to MFA do not solve the problem. A MITM attack
against all legs can simply steal and play the OTP to obtain a session.
Normally it's done innocently as in this case, but it can be done as an
attack.

-- Scott

Attachment: smime.p7s
Description: S/MIME cryptographic signature