ref: previous posts http://www.garlic.com/~lynn/aepay10.htm#65 eBay Customers Targetted by Credit Card Scam
so another AADS based implementation is SSH .... i build a table of acceptable public keys .... and then they can be used to authenticate. so an enhancement to SSH would be to add fips186-2/x9.62 ecdsa support to standard SSH distribution. then you can use a hardware token or a pda that supports simple fips186-2/x9.62 ecdsa digital signatures to sign x9.59 financial transactions (all forms), radius logins of your PPP connections (just about all ISP, DSL, dial, etc), as well as all kerberos, and then ssh. nothing special in the token needs to be aware of anything ... other than it is signing a message ... and the same token can be used for everything that requires a fips186-2/x9.62 ecdsa digital signature. .... misc. ssh refs: http://www.openssh.com/ http://archive.erdelynet.com/ssh-l/ http://www.ssh.com/
