Re: SSH revised

[Bas Wijnen]

On Tue, Mar 28, 2006 at 08:25:30PM +0200, Marcus Brinkmann wrote:
> Anyway, I think user-based authentication would be severly crippled by
> a confinement requirement.  One feature that would be useful is if
> they can access arbitrary devices that are not supported by the
> system, and for that alone you can forget about confinement here.

Hmm, that makes sense.  So you suggest the user needs to select an ID first,
after which an explicit confirmation is needed that it's the right one (for
example showing the fingerprint picture)?

Thanks,
Bas

-- 
I encourage people to send encrypted e-mail (see http://www.gnupg.org).
If you have problems reading my e-mail, use a better reader.
Please send the central message of e-mails as plain text
   in the message body, not as HTML and definitely not as MS Word.
Please do not use the MS Word format for attachments either.
For more information, see http://129.125.47.90/e-mail.html

signature.asc
Description: Digital signature