Misconceptions about NFC(devraza.duckdns.org)
devraza.duckdns.org
Misconceptions about NFC
https://devraza.duckdns.org/blog/nfc-misconceptions/
2 comments
Thanks for the info! I probably should have done some more research myself...what you said about security not being 'black and white' is something I forgot to pay more attention to while writing the blog post.
I've updated the blog post with an alert about this accordingly.
I've updated the blog post with an alert about this accordingly.
Security of NFC applications is complex, and generally a layered approach. Yes, physical distance is a mitigating factor. Using smart cards (rather than keyfobs) and encrypted communication mitigates the risk of skimming. Using sensible financial limits and good monitoring limits the impact of any issue that does occur.
In the end, security is not a black and white 'you need to be at a distance thus things are secure' story. It's about reducing the risk, which is a combination of reducing probability _and_ reducing impact.