oss-sec mailing list archives

Re: OpenSSH key blacklisting


From: Florian Weimer <fw () deneb enyo de>
Date: Wed, 28 May 2008 17:14:22 +0200

* Tim Brown:

Maybe I've missed something, in which case, shoot me down, but why
unlike other services that make use of public key cryptography, does
OpenSSH not have use a model which supports proper authorisation and
revocation mechanisms?

I haven't seen a working revocation mechanism implemented elsewhere.
It's a very difficult problem.


Current thread: