Re: Signed Email PAM authentication
On Fri 14 May 2021 at 16:29:32 (+0200), Marek Mosiewicz wrote:
>
> I think of idea of having additional PAM module which passes login
> after receiving and validating signed email (for some scenarios it
> could even requires emails from many persons).
That's all very vague. You need to specify a sequence of
who has to do what, where, and how.
After that, you have the problem of how/where you suspend
this process until all^H^H^H the replies are received.
(BTW I would suggest a quorum.)
Normally, a successful login is fast; it's those that fail
which take more time.
> Signing emails can be
> done easliy in secure way
That's a separate issue.
> and it could be also good for auditing.
How?
Cheers,
David.
Reply to: