diff options
| author | Thomas Schwinge <tschwinge@gnu.org> | 2008-10-08 00:26:42 +0200 |
|---|---|---|
| committer | Thomas Schwinge <tschwinge@gnu.org> | 2008-10-08 00:26:42 +0200 |
| commit | f7cc93166ae25dc6936b7115f4196030c1eca288 (patch) | |
| tree | 0041ccc3b41647cbe220cd743e53c770f03d3317 /hurd/ng/usecaseprivatekeys.mdwn | |
| parent | c27c0f96b9ca6898064d5bdbbc79c4475ee7c65a (diff) | |
UNIX.
Diffstat (limited to 'hurd/ng/usecaseprivatekeys.mdwn')
| -rw-r--r-- | hurd/ng/usecaseprivatekeys.mdwn | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/hurd/ng/usecaseprivatekeys.mdwn b/hurd/ng/usecaseprivatekeys.mdwn index 612a8f25..3cb65af2 100644 --- a/hurd/ng/usecaseprivatekeys.mdwn +++ b/hurd/ng/usecaseprivatekeys.mdwn @@ -1,6 +1,10 @@ _Private Keys_ as used by SSH servers, clients and generally by any cryptographic software need to be stored and manipulated securely. These may get replaced with smartcards soon, but in the mean time it appears to be an interesting use case. -All Unix systems that I am aware of do not allow secrets to be protected in a manner that I would feel is appropiate. A users compromised web browser could either read your private key file or talk to the very popular ssh-agent program and get your secrets out (not sure how popular distributions are configured, but it can be done). +All [[Unix]] systems that I am aware of do not allow secrets to be protected in +a manner that I would feel is appropiate. A users compromised web browser +could either read your private key file or talk to the very popular ssh-agent +program and get your secrets out (not sure how popular distributions are +configured, but it can be done). The requirements so far are: |