Re: transfering files back along an existing connection

[Joe Rhett]

On Tue, Feb 09, 1999 at 01:04:59AM +0100, Peter Svensson wrote:
> The main case for not using rsa/password authentication as far as I see is
> that the client computer may not be trusted forever. It is very hard to
> safly remove all traces of a file/memory area in any modern os. Chances
> are that somewhere the passphrase/password/key will remain. If the
> reusable information has never been in the computer there is no such risk.
 
This is true.

The other case is when SSH is NOT the only type of access which needs
authentication. Rather than managing two/three/four different security
paradigms, you use a single method of authentication for all.
 
-- 
Joe Rhett                                                 Systems Engineer
[EMAIL PROTECTED]                                          ISite Services

PGP keys and contact information:          http://www.noc.isite.net/Staff/