Re: [Muscle] Remote connections to pcsc

2007-09-22 Thread Ludovic Rousseau
2007/9/22, Michael Bender/MBP [EMAIL PROTECTED]: I still wonder if it's ever really necessary to have APDU level access to a card that is on a remote system. How useful is it to be able to send raw SCSI commands to a disk drive on another box for example? Disks are abstracted via filesystems

Re: [Muscle] Remote connections to pcsc

2007-09-21 Thread Douglas E. Engert
Shawn Willden wrote: Hi everyone, I have a situation where it would be convenient to have a card reader connected to one machine, and the application using it running on another machine. It occurred to me that if libpcsclite were to use a TCP socket rather than a UNIX socket to connect

Re: [Muscle] Remote connections to pcsc

2007-09-21 Thread Shawn Willden
On Friday 21 September 2007 09:11:14 am Douglas E. Engert wrote: What are the security implications to doing this? In this particular case, I don't care. Both machines are to be deployed in a secure environment. In general, though, I think it also doesn't matter that much. Any reasonable

Re: [Muscle] Remote connections to pcsc

2007-09-21 Thread Douglas E. Engert
Shawn Willden wrote: On Friday 21 September 2007 09:11:14 am Douglas E. Engert wrote: What are the security implications to doing this? In this particular case, I don't care. Both machines are to be deployed in a secure environment. In general, though, I think it also doesn't matter

Re: [Muscle] Remote connections to pcsc

2007-09-21 Thread Shawn Willden
On Friday 21 September 2007 01:10:38 pm Douglas E. Engert wrote: Not the ones I have seen. The assumption is the user of the card has physical control over the reader, and is using the machine in front of him. For authentication, yes. But, as I said, authentication would make no sense in the

Re: [Muscle] Remote connections to pcsc

2007-09-21 Thread Shawn Willden
On Friday 21 September 2007 01:10:38 pm Douglas E. Engert wrote: Shawn Willden wrote: In general, though, I think it also doesn't matter that much. Any reasonable secure smart card API (I'm talking about the APDU-level API) must assume that an attacker can get between the card and the

Re: [Muscle] Remote connections to pcsc

2007-09-21 Thread Shawn Willden
On Friday 21 September 2007 01:27:29 pm Huang, Peter (GT/PGS-Palo Alto) wrote: I would recommend that you take a closer look at rdesktop support. The smartcard support is in the base version for 1.5 and I have help test it. Can it be used without all of the remote desktop stuff? Both of the

Re: [Muscle] Remote connections to pcsc

2007-09-21 Thread Ludovic Rousseau
2007/9/21, Shawn Willden [EMAIL PROTECTED]: Hi everyone, Hello, I have a situation where it would be convenient to have a card reader connected to one machine, and the application using it running on another machine. It occurred to me that if libpcsclite were to use a TCP socket rather

Re: [Muscle] Remote connections to pcsc

2007-09-21 Thread Michael Bender/MBP
Shawn Willden wrote: On Friday 21 September 2007 01:10:38 pm Douglas E. Engert wrote: Not the ones I have seen. The assumption is the user of the card has physical control over the reader, and is using the machine in front of him. For authentication, yes. But, as I said, authentication would

Re: [Muscle] Remote connections to pcsc

2007-09-21 Thread Philippe C. Martin
Le Thursday 20 September 2007 21:24:14 Shawn Willden, vous avez écrit : Hi everyone, I have a situation where it would be convenient to have a card reader connected to one machine, and the application using it running on another machine. It occurred to me that if libpcsclite were to use a

Re: [Muscle] Remote connections to pcsc

2007-09-21 Thread Philippe C. Martin
Le Thursday 20 September 2007 21:24:14 Shawn Willden, vous avez écrit : Hi everyone, I have a situation where it would be convenient to have a card reader connected to one machine, and the application using it running on another machine. It occurred to me that if libpcsclite were to use a

Re: [Muscle] Remote connections to pcsc

2007-09-21 Thread Shawn Willden
On Friday 21 September 2007 08:32:42 pm Philippe C. Martin wrote: You can find this on my site (www.snakecard.com) ... look at the net directory in SCF.zip where I have my PCSC server. The documentation explains briefly how to do it ... let me know if that is not enough. Very cool... this

Re: [Muscle] Remote connections to pcsc

2007-09-21 Thread Shawn Willden
On Friday 21 September 2007 04:43:13 pm Michael Bender/MBP wrote: It seems to me that the better approach would be to abstract the card functionality over the network (i.e. sign this, verify that). That's fine where it works, where the usage of the card fits a well-known model. In my

[Muscle] Remote connections to pcsc

2007-09-20 Thread Shawn Willden
Hi everyone, I have a situation where it would be convenient to have a card reader connected to one machine, and the application using it running on another machine. It occurred to me that if libpcsclite were to use a TCP socket rather than a UNIX socket to connect to pcscd, this would be

Re: [Muscle] Remote connections to pcsc

2007-09-20 Thread Paul Klissner
Shawn Willden wrote: Hi everyone, I have a situation where it would be convenient to have a card reader connected to one machine, and the application using it running on another machine. It occurred to me that if libpcsclite were to use a TCP socket rather than a UNIX socket to connect to