-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Fri 2007-06-01 13:32:56 -0400, Jeffrey Altman wrote:
> I do want to state that as a KDC administrator would have serious > concerns with the use of SSH keys as a method of authenticating a > user to my realm. Users do not generate unique keys for hosts in > separate authentication domains. They tend to re-use the same key > everywhere. They also tend to copy the private keys all over the > place. As a result the risk of private key theft is high and there > is no mechanism to know what systems have been compromised once the > theft has occurred. Furthermore, there is no clear mechanism to revoke an ssh key once it is known to have been compromised. For the specific case of using an ssh key as an authentication method against a single realm, the administrator of the realm in question can always force a re-keying of the principal in question. But as soon as you consider more than a single realm (or host, in the classic ssh model), i don't know of a good, automated way to handle ssh key revocation. --dkg -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Processed by Mailcrypt 3.5.8+ <http://mailcrypt.sourceforge.net/> iD8DBQFGYIbtiXTlFKVLY2URAjuaAKC4hq+KYuhJ5zRwFKnTD2WVgHlRUwCgsX5G X4/RkoCmz2Wplp9NgQEBXvQ= =36TC -----END PGP SIGNATURE----- ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos