Re: SecureID vs Certificates

[<beldridg () best com>]

On Thu, 15 Feb 2001, Marcus J. Ranum wrote:

> This is kind of what a smart card is all about. Do the signature on
> the card, so the secret never leaves it, etc. Amazingly cool
> technology but it's just never caught on particularly well here.

agreed.

i'm still watching what the umich folks are doing with ssh-agent and the
cryptoflex cards. i think it is the right approach. any updates guys?

http://www.citi.umich.edu/projects/smartcard/ssh-sc.html
http://www-personal.engin.umich.edu/~itoi/openssh/patch-openssh2.3.0-smartcard

they are also working on a crypto filesystem with the keys stored on a
smartcard.

- brett



_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards