3 ms·
If you're giving the computer, your cryptographic keys from your security token in order to start a session then a malicious program on a rooted machine will ha
by true_religion 15y ago
If you're giving the computer, your cryptographic keys from your security token in order to start a session then a malicious program on a rooted machine will have access to them too.
- onemoreact 15y agoGood tokens don't work that way. Normally your giving out a 5-10 digit code that is valid for 30 seconds and can be compared with a secure server somewhere. Physical devices plugged into the machine often work the same way, but use a longer code that you don't need to enter. In either case the token never gives up it's private key's.