On Sun, 18 Feb 2007, Mark Crispin wrote:

> If the user enters the decryption key when he runs Alpine, doesn't that defeat
> the purpose of the passfile?  I can see the benefit when there are multiple
> passwords for multiple servers; in this case, one password unlocks a "password
> vault" that Alpine can then use for the rest of the session.  But that doesn't
> help the typical user who just has one password that Alpine needs to use.

Uh-oh - the "most users" argument again :)

The reason I personally want passfile support is exactly because I have
multiple passwords for multiple servers, both for reading and sending
mail.

> Are you thinking about something like a biometric key; e.g., the user swipes
> his finger over a fingerprint scanner and that unlocks the password vault?

I didnt think of that, but yes, it can be done.

> If you're doing this on a site basis, wouldn't Kerberos end up being easier?

Sure, but then I just need to convince a whole lot of people that they
need to support kerberos on their systems.


-- kolla


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to