[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-disclosure] RE : Putty Proxy login/password discolsure....(Answer from PUTTY Staff)
- To: Simon Tatham <anakin@xxxxxxxxx>, full-disclosure@xxxxxxxxxxxxxxxxx
- Subject: Re: [Full-disclosure] RE : Putty Proxy login/password discolsure....(Answer from PUTTY Staff)
- From: Matthew Flaschen <matthew.flaschen@xxxxxxxxxx>
- Date: Wed, 25 Oct 2006 15:14:14 -0400
Could use the same passphrase for the proxy password and SSH keys?
Simon Tatham wrote:
> Matthew Flaschen <matthew.flaschen@xxxxxxxxxx> wrote:
>
>> Why can't you generate the encryption key from a passphrase?
>
> Because requiring the user to type in their passphrase at the start
> of the session in order to decrypt their proxy password is no more
> convenient than requiring them to type in the proxy password
> directly!
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/