5 ms·
Wouldn't it be better to have your "infinity key" not reveal the secret data, using a smartcard or similar technology? That way if the computer that it's connec
by finnn 11y ago
Wouldn't it be better to have your "infinity key" not reveal the secret data, using a smartcard or similar technology? That way if the computer that it's connected to is untrusted, no further damage could be done after removing the card. That + TLS client certificates stored on this card seem like it might not be the worst user experience, while still remaining reasonably secure. From my brief Googling it looks like the US military uses something like this.
- deleted 11y ago[deleted]
- astazangasta 11y agoYes, RSA provides systems like this also I think. My solution is worse, but only uses commodity hardware and free software. When I can program my own smart card I will prefer that.
- finnn 11y agoFirefox, which I think would be considered free software despite some of the shit they've been bundling, does client certificates, and I'd imagine one could program their own smartcard, although I don't know much about it.
- icebraining 11y agoThe Basic Card is programmable: http://www.basiccard.com/ http://www.basiccard.com/ It's what the FSF Europe uses for their OpenPGP cards, that you get if you join their Fellowship. EDIT: apparently, the programmable version doesn't come with RSA support :|