lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <200403232126.i2NLQsjF007814@turing-police.cc.vt.edu>
From: Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu)
Subject: Re: pgp passphrase 

On Tue, 23 Mar 2004 19:23:45 +0100, Caraciola <caraciola@....net>  said:

> One measure to enhance security would be externel storage of keys, on a smart 
> card like in secure internet banking where an external reader has to  have a 
> keypad, so a pass doesn't travel anywhere on the computer ... with banking 
> there are only numbers as pass, but the principle seems sound enough.

These are indeed a good idea for some environments - the big question is
whether you're willing to pay $50 per seat for the reader and another $20 per
user for the media, for the added security you'd get (yes, you can probably get
the price down if you use a stupider smart card, but then you lose
functionality).

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20040323/b261d55d/attachment.bin

Powered by blists - more mailing lists