On Feb 1, 2008 5:52 PM, Vasily Khoruzhick <[EMAIL PROTECTED]> wrote: > The problem appears when two or more users have same fingerprint enrolled.
I think you should just reject the attempt if it matches multiple users and ask to retry. For example, what if there is a system with just 2 users, you and me? Then if I attempt a login and it prompts for username then I immediately know I can provide your username and read your private documents :-) Similarily, the user with higher "priority" gets lower security, because if a lower priority user attempts login and it matches the higher priority user, it will give one user access to another user's account... no? -- "Thou shalt not follow the null pointer for at it's end madness and chaos lie." _______________________________________________ fprint mailing list [email protected] http://lists.reactivated.net/mailman/listinfo/fprint
