Full Disclosure mailing list archives

Re: Re: pgp passphrase


From: Valdis.Kletnieks () vt edu
Date: Tue, 23 Mar 2004 16:26:54 -0500

On Tue, 23 Mar 2004 19:23:45 +0100, Caraciola <caraciola () gmx net>  said:

One measure to enhance security would be externel storage of keys, on a smart 
card like in secure internet banking where an external reader has to  have a 
keypad, so a pass doesn't travel anywhere on the computer ... with banking 
there are only numbers as pass, but the principle seems sound enough.

These are indeed a good idea for some environments - the big question is
whether you're willing to pay $50 per seat for the reader and another $20 per
user for the media, for the added security you'd get (yes, you can probably get
the price down if you use a stupider smart card, but then you lose
functionality).

Attachment: _bin
Description:


Current thread: