On Wed, 11 Jun 1997, Craig Brozefsky <craig @
onshore .
com> wrote:
> SecurID is lame, I'll say it again. Why pay for a OTP password system
> with no encryption capabilities, and a non-published cryptographic
> method for generating the tokens, when I can use ssh for free, or
> purchase it from F-Prot if I need that commercial feeling?
SSH and SecurID are not things you should compare. SSH is not something
you should use rely on instead of SecurID, but what you should do is use
SecurID authentication over SSH. Yes I do not like SecurID hash algorithm
being unpublished either, let's just hope SDTI one day will understand it
needs to use public algorithms. OTP systems are much better for user auth
than just RSA auth that SSH does, but the again SSh does have some support
for SecurID already.
Jyri
Follow-Ups:
|
|
