Re: Smartcard and non-password methods (was Re: Password repository)

2009-11-21 Thread John Levine
Are passwords still the only lowest-common-denominator? There's OpenID, where a provider can use any verification process it wants, but all the OpenID providers I know use ordinary passwords. R's, John

Re: Smartcard and non-password methods (was Re: Password repository)

2009-11-21 Thread Jack Bates
John Levine wrote: Are passwords still the only lowest-common-denominator? There's OpenID, where a provider can use any verification process it wants, but all the OpenID providers I know use ordinary passwords. Yeah, and every ISP would probably use key authentication, except there's not a

RE: Smartcard and non-password methods (was Re: Password repository)

2009-11-21 Thread Adam Stasiniewicz
Sadly, passwords are the least common denominator. The biggest problems with 2 factor devices (smart cards, OTPs, etc) is having to buy, configure, and distribute them; plus get them to work with all the myriad of applications. Certificates that are issued to computers/web browsers suffer from

Re: Smartcard and non-password methods (was Re: Password repository)

2009-11-21 Thread Stefan
[Sightly off-topic - solution specific] Some European countries have long figured out logistics of smartcard distribution and management in their healthcare systems - some being at the second generation, already. In fact this is a subject dear to my heart, as I've researched and attempted a

Re: Smartcard and non-password methods (was Re: Password repository)

2009-11-21 Thread Jeffrey Lyon
I was pretty excited about this post until I found out that myvidoop only works on older version of FF. Jeff On Sat, Nov 21, 2009 at 12:31 PM, Matthew Palmer mpal...@hezmatt.org wrote: On Sat, Nov 21, 2009 at 02:38:32PM -, John Levine wrote: Are passwords still the only

Re: Smartcard and non-password methods (was Re: Password repository)

2009-11-21 Thread Matthew Palmer
On Sat, Nov 21, 2009 at 04:06:48PM -0500, Jeffrey Lyon wrote: I was pretty excited about this post until I found out that myvidoop only works on older version of FF. I can only find something about the plugin not working on FF 3.5, but I don't use the plugin since I only use it as an OpenID

Re: Smartcard and non-password methods (was Re: Password repository)

2009-11-21 Thread Jeffrey Lyon
So it works as a standalone password vault also? Jeff On Sat, Nov 21, 2009 at 4:55 PM, Matthew Palmer mpal...@hezmatt.org wrote: On Sat, Nov 21, 2009 at 04:06:48PM -0500, Jeffrey Lyon wrote: I was pretty excited about this post until I found out that myvidoop only works on older version of

Re: Smartcard and non-password methods (was Re: Password repository)

2009-11-21 Thread Matthew Palmer
On Sat, Nov 21, 2009 at 04:58:27PM -0500, Jeffrey Lyon wrote: So it works as a standalone password vault also? I don't know. My only experience with it has been as an OpenID endpoint/provider/whatever, and it was on that basis that I replied originally. - Matt

Any Yahoo! mail admins?

2009-11-21 Thread Thom Hooker
Hi Could a Yahoo! mail admin contact me off-list please? We have been getting 421 Temporarily deferred messages from Yahoo! for the past 48 hours with no signs of any improvement (despite filling out their forms) and an ever growing outbound queue. Thanks Thom SMX Ltd http://smxemail.com

Re: Any Yahoo! mail admins?

2009-11-21 Thread Big Wave Dave
On Sat, Nov 21, 2009 at 3:01 PM, Thom Hooker th...@smx.co.nz wrote: Hi Could a Yahoo! mail admin contact me off-list please? We have been getting 421 Temporarily deferred messages from Yahoo! for the past 48 hours with no signs of any improvement (despite filling out their forms) and an

Re: Smartcard and non-password methods (was Re: Password repository)

2009-11-21 Thread Scott Howard
On Sat, Nov 21, 2009 at 6:38 AM, John Levine jo...@iecc.com wrote: Are passwords still the only lowest-common-denominator? There's OpenID, where a provider can use any verification process it wants, but all the OpenID providers I know use ordinary passwords.

Re: Smartcard and non-password methods (was Re: Password repository)

2009-11-21 Thread Randy Bush
is there a freebsd pam tacacs+ hack? randy

Re: Smartcard and non-password methods (was Re: Password repository)

2009-11-21 Thread Joel Jaeggli
cards and tokens are a proxy for the use of a certificate authentication system... You can in fact do certificate auth without the use of cards or tokens or mix and match physical tokens and other private key storage depending on need with the same authentication backend (typically ldap). Since

Partial outage at Peer1 Los Angeles (600 W. 7th)

2009-11-21 Thread Jeffrey Lyon
We lost a cabinet in this about 25 minutes ago, anyone else effected? -- Jeffrey Lyon, Leadership Team jeffrey.l...@blacklotus.net | http://www.blacklotus.net Black Lotus Communications of The IRC Company, Inc. Follow us on Twitter at http://twitter.com/ddosprotection to find out about news,