On 8/30/06, Alan Altmark <[EMAIL PROTECTED]> wrote:

Yeah, but you have an HD password, right?  And you require authentication
to your OS?

I assume the password generator will reveal that password when you set
it? Even if you forget it immediately I think it is less secure than
not being able to use a password at all. Apart from the fact that if
there is a password someone will find a justification to have that
shared with others, just in case.

Obviously you want a person's private key encrypted with a passphrase.
An ssh agent could hold a copy of the unencrypted key temporarily, if
that is suitable in your environment. That's similar to leaving your
session logged on when you leave your workstation for a moment.

Rob

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390

Reply via email to