简体   繁体   中英

Is PIN caching acceptable in Javascript?

I have a web service that prompts for the user credentials (PIN) before requesting for the smart card. My question is: Are there any security guidelines regarding PIN caching?

PIN caching is on the convenience side of the security vs. convenience scale. Asking for the PIN before the card is even known is at the very least suspicious. Caching is in general weakening the security and one has to decide, whether that is acceptable: what are you trying to prove with PIN entry and is it sufficient to know, that the card holder was present earlier?

The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM