Remote signing

[Dennis Lambe Jr.]

On Tue, 2004-04-20 at 19:21, Ian Bruce wrote:
> If the Sun machine or the SSH session are
> compromised, the worst that can happen is that the human user will be
> tricked into signing a bogus message.

This risk can be mitigated by having the client-side script print out
the to-be-signed text for verification.

--D
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 279 bytes
Desc: This is a digitally signed message part
Url : /pipermail/attachments/20040427/a852f31f/attachment.bin