Why do they "have to go"? Keys are a physical authenticator (something you 
have). You give it to someone else, and you run the risk of it being cloned or 
otherwise compromised. A simple solution would be not to give your keys out to 
untrusted parties...

I think the fundamental issues with using current keys is that there's no 
separation between identity and authenticator. Just like using your CC number 
online: http://technet.microsoft.com/en-us/library/cc512578.aspx is an old 
article, but still applies. Not to mention the lack of simple revocation 
mechanisms, audit capabilities etc. :)

Cheers
Ken

From: [email protected] [mailto:[email protected]] On 
Behalf Of Micheal Espinola Jr
Sent: Thursday, 31 July 2014 11:11 AM
To: ntsysadm
Subject: Re: [NTSysADM] This was inevitable, but it's still a good reminder

It was inevitable.  Locks and keys as they have existed for decades simply have 
to go.

--
Espi


On Tue, Jul 29, 2014 at 7:17 AM, Kurt Buff 
<[email protected]<mailto:[email protected]>> wrote:
Physical security is just as important as computing security
http://www.wired.com/2014/07/keyme-let-me-break-in/



Reply via email to