Re: SecureID vs Certificates

[Darren Reed <darrenr () reed wattle id au>]

In some email I received from Marcus J. Ranum, sie wrote:
> Darren Reed wrote:
> > This talk has got me thinking...has anyone found a way to combine
> > OTP's with digital certificates?
>
> This is kind of what a smart card is all about.
[...]

I've been playing with an iKey-2000 and while it's kind of cool when
used with Netscape, it still requires a static password/pass phrase
to unlock it.  What I want is for that password to be an SKEY input
(or similar).  Actually, there is only one uncool part of the iKey
2000 and that is, for the version I received, to use it with Internet
Explorer required copying the private key to the system's registry.
Oh, it doesn't do 3-DES (or the version I received didn't) if that
matters.  But otherwise, generation of certifications and all the
other crypto functions are done on the wonderful little USB tag.

Darren
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards