[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Debian two-factor auth, GSoC?



On 04/12/2013 03:25 AM, Tollef Fog Heen wrote:
> The Yubikey neo can run the java applet thingies, it seems, so it can
> act as a GPG token too. 
Please, please, please ... no java!!!
That's a security nightmare. I think we'd be less safe with
than without it.

Also, while I think the idea is nice, and that it would be a nice
thing to *propose* it to all DDs, I think it would be annoying
to actually *require* 2 factors auth from DDs (especially with
the ssh keys on Alioth).

Thomas


Reply to: