Date: Sat, 19 Jan 2002 17:59:47 +0300 From: "Andrey A. Chernov" <ache@nagual.pp.ru> To: Mark Murray <mark@grondar.za> Cc: Kris Kennaway <kris@obsecurity.org>, cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/lib/libpam/modules/pam_opie pam_opie.c Message-ID: <20020119145947.GF9803@nagual.pp.ru> In-Reply-To: <200201191421.g0JELot21577@grimreaper.grondar.org> References: <20020119123903.GA8776@nagual.pp.ru> <200201191421.g0JELot21577@grimreaper.grondar.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Jan 19, 2002 at 14:21:50 +0000, Mark Murray wrote: > > We already live with this "change" several years when S/Key was here and > > nobody complaints. This is not a change, this is return to old way as it > > must be. > > One of the reasons I went for OPIE was to get away from S/Key brokenness. What brokenness do you mean, exactly? There basically just the same idea in OPIE, only OTP response format is changed which is enhancement and not brokennes fix. Many other OPIE "features" either _lowers_ security and should be never turned on (like LOCKING) or gains nothing for security, just make interface inconvinient. Some other (not so useful, but who knows) features like tty-level access is even removed in OPIE. -- Andrey A. Chernov http://ache.pp.ru/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020119145947.GF9803>