[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 28 May 2008 17:14:22 +0200
From: Florian Weimer <fw@...eb.enyo.de>
To: oss-security@...ts.openwall.com
Subject: Re: OpenSSH key blacklisting
* Tim Brown:
> Maybe I've missed something, in which case, shoot me down, but why
> unlike other services that make use of public key cryptography, does
> OpenSSH not have use a model which supports proper authorisation and
> revocation mechanisms?
I haven't seen a working revocation mechanism implemented elsewhere.
It's a very difficult problem.
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Powered by Openwall GNU/*/Linux -
Powered by OpenVZ
