[an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] (none) [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] (none) [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive]
 
[an error occurred while processing this directive] [an error occurred while processing this directive]
Skåne Sjælland Linux User Group - http://www.sslug.dk Home   Subscribe   Mail Archive   Forum   Calendar   Search
MhonArc Date: [Date Prev] [Date Index] [Date Next]   Thread: [Date Prev] [Thread Index] [Date Next]   MhonArc
 

Re: [SIGNATUR] Overblik omkring TDC signaturer



"Mads Bondo Dydensborg" <sslug@sslug> wrote in message
news:sslug@sslug

> OK - Her forstår jeg det som at du taler om at certifikatet _efter_ man
> har fået det. Som jeg hidtil har forstået det, gemmes det (under Linux) på
> forskellig vis afhængig af (f.eks) ens desktopssystem. KDE gemmer det eet
> sted (til brug for kmail, konqueror, mv), mozilla et andet osv.
>

jep, med java kan man download applets i en browser og som kan lave logon og
digital signatur.

En lille feature i IE er at man kan slå sikkerheden for  brugen af
certifikatet fra. Dvs. brugeren bliver ikke promptet for password når han
bruger certifikatet. Hvor ligger lige præcist sikkerheden for brugerens
autencitet? Hvor fedt er det at bankerne kræver kvalificerede certifikater
når brugeren kan slå de hele fra? nu er IE også en rigtig dygtigt skrevet
browser, med sikkerheden i fokus.

Så derfor, certifikater installeret i en browser kan kun bruges til 2-way
auth SSL. Server side bør ikke bruge client cert som identifikation, da
client side kan slå sikkerheden fra. Så browser certifikater kan kun bruges
til SSL. Intet andet efter min mening.

/Bo
http://bofriis.dk




 
Home   Subscribe   Mail Archive   Index   Calendar   Search

 
 
Questions about the web-pages to <www_admin>. Last modified 2005-08-10, 20:33 CEST [an error occurred while processing this directive]
This page is maintained by [an error occurred while processing this directive]MHonArc [an error occurred while processing this directive] # [an error occurred while processing this directive] *