On Mon, Feb 08, 1999 at 11:52:58PM -0500, Greg A. Woods wrote:
> You really *must* completely trust the client computer, even if only for
> a limited duration of time.  Period.
 
True. But if I use RSA authentication, I am potentially trusting them
forever. If I use hardware-based one-time passwords then I have a risk of
session compromise, but I don't incur the risk of sessions being initiated
after I've left. It minimizes the risk beyond what RSA can provide.

I've been saying this for 12 messages now. You clearly can't imagine an
environment you can't push your favorite solution into. PLEASE let it go. 
I'm practically begging you now. I'm sick of talking to a wall, it's quite
useless.

-- 
Joe Rhett                                                 Systems Engineer
[EMAIL PROTECTED]                                          ISite Services

PGP keys and contact information:          http://www.noc.isite.net/Staff/

Reply via email to