Re: Non-Mathmatical Forging of PKI Digital Certificates / Throwing Rocks at the PKI

["Timothy J. Miller" <cerebus () SACKHEADS ORG>]

Christoph Puppe <christoph.puppe () DEFCOM-SEC COM> writes:

> > smartcard-enabled company, when the CEO forgets his smartcard at home
> > are *you* going to tell him that he *must* drive home and get it, or
> > are you simply going to snatch his private key from escrow and issue
> > him a temporary card?

>   He should fire you if you don't.

        *You* know that and *I* know that, but this is *exactly* the
approach being taken by most private PKI rollouts.

-- Cerebus