Re: [OT] Recognizing certificate removal (SmartCard)

2012-12-06 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Chuck, On 12/5/12 5:07 PM, Caldarale, Charles R wrote: From: André Warnier [mailto:a...@ice-sa.com] Subject: Re: [OT] Recognizing certificate removal (SmartCard) Too late (at least in the US); you just made it public... Shuks. Ok then, I'll

Re: Recognizing certificate removal (SmartCard)

2012-12-05 Thread André Warnier
Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Will, On 12/4/12 2:47 PM, Will Nordmeyer wrote: Thanks for the quick response and the thoughts. a 5 minute timeout wouldn't be acceptable in our environment - theory being, if user A pulls his smart card out (but didn't

Re: Recognizing certificate removal (SmartCard)

2012-12-05 Thread Will Nordmeyer
On Tue, Dec 4, 2012 at 3:07 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Will, On 12/4/12 2:47 PM, Will Nordmeyer wrote: Thanks for the quick response and the thoughts. a 5 minute timeout wouldn't be acceptable in our

Re: Recognizing certificate removal (SmartCard)

2012-12-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 12/5/12 3:12 AM, André Warnier wrote: Other than that, and without any pretense at offering a solution to the present issue, maybe this is the point where one needs to step back and ask oneself if this is really a problem of the

Re: Recognizing certificate removal (SmartCard)

2012-12-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Will, On 12/5/12 7:33 AM, Will Nordmeyer wrote: On Tue, Dec 4, 2012 at 3:07 PM, Christopher Schultz ch...@christopherschultz.net wrote: Will, On 12/4/12 2:47 PM, Will Nordmeyer wrote: Thanks for the quick response and the thoughts. a 5 minute

Re: [OT] Recognizing certificate removal (SmartCard)

2012-12-05 Thread André Warnier
Will Nordmeyer wrote: ... Oddly enough, yes, it is a valid use case. we have specific scenarios where there are common use PCs that have a generic ID logged in, As far as I remember the classics, that in itself is already a flaw with regard to security, no ? but they use their CAC

Re: [OT] Recognizing certificate removal (SmartCard)

2012-12-05 Thread David kerber
On 12/5/2012 1:35 PM, André Warnier wrote: ... (*) Come to think of it, it would be rather universal as a solution. and not so complex to set up. I may have to patent this idea... Too late (at least in the US); you just made it public...

Re: [OT] Recognizing certificate removal (SmartCard)

2012-12-05 Thread André Warnier
David kerber wrote: On 12/5/2012 1:35 PM, André Warnier wrote: ... (*) Come to think of it, it would be rather universal as a solution. and not so complex to set up. I may have to patent this idea... Too late (at least in the US); you just made it public... Shuks. Ok then, I'll have to be

Re: [OT] Recognizing certificate removal (SmartCard)

2012-12-05 Thread David kerber
On 12/5/2012 4:18 PM, André Warnier wrote: David kerber wrote: On 12/5/2012 1:35 PM, André Warnier wrote: ... (*) Come to think of it, it would be rather universal as a solution. and not so complex to set up. I may have to patent this idea... Too late (at least in the US); you just made it

Re: [OT] Recognizing certificate removal (SmartCard)

2012-12-05 Thread André Warnier
David kerber wrote: On 12/5/2012 4:18 PM, André Warnier wrote: David kerber wrote: On 12/5/2012 1:35 PM, André Warnier wrote: ... (*) Come to think of it, it would be rather universal as a solution. and not so complex to set up. I may have to patent this idea... Too late (at least in the

RE: [OT] Recognizing certificate removal (SmartCard)

2012-12-05 Thread Caldarale, Charles R
From: André Warnier [mailto:a...@ice-sa.com] Subject: Re: [OT] Recognizing certificate removal (SmartCard) Too late (at least in the US); you just made it public... Shuks. Ok then, I'll have to be satisfied with the glory. The US patent law has changed (but may not go into effect until

Re: [OT] Recognizing certificate removal (SmartCard)

2012-12-05 Thread André Warnier
Caldarale, Charles R wrote: From: André Warnier [mailto:a...@ice-sa.com] Subject: Re: [OT] Recognizing certificate removal (SmartCard) Too late (at least in the US); you just made it public... Shuks. Ok then, I'll have to be satisfied with the glory. The US patent law has changed

Recognizing certificate removal (SmartCard)

2012-12-04 Thread Will Nordmeyer
First off, thanks to all for the assistance getting my other tomcat CRL issues working. Converted to APR and tcnative and things seem to be loading, running well now. Now, the question has come up - what happens when a user authenticates with their Smart Card, but then pulls their card and walks

Re: Recognizing certificate removal (SmartCard)

2012-12-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Will, On 12/4/12 12:08 PM, Will Nordmeyer wrote: First off, thanks to all for the assistance getting my other tomcat CRL issues working. Converted to APR and tcnative and things seem to be loading, running well now. Now, the question has come

Re: Recognizing certificate removal (SmartCard)

2012-12-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Will, On 12/4/12 12:46 PM, Christopher Schultz wrote: On 12/4/12 12:08 PM, Will Nordmeyer wrote: First off, thanks to all for the assistance getting my other tomcat CRL issues working. Converted to APR and tcnative and things seem to be

Re: Recognizing certificate removal (SmartCard)

2012-12-04 Thread Will Nordmeyer
On Tue, Dec 4, 2012 at 12:48 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Will, On 12/4/12 12:46 PM, Christopher Schultz wrote: On 12/4/12 12:08 PM, Will Nordmeyer wrote: First off, thanks to all for the assistance getting my

Re: Recognizing certificate removal (SmartCard)

2012-12-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Will, On 12/4/12 2:47 PM, Will Nordmeyer wrote: Thanks for the quick response and the thoughts. a 5 minute timeout wouldn't be acceptable in our environment - theory being, if user A pulls his smart card out (but didn't log out of the app), and