On Sat, Jul 12, 2014 at 3:59 PM, Pavel Herrmann <morpheus.i...@gmail.com> wrote: > Hi Hi, > On Saturday 12 of July 2014 15:35:33 Igor Gnatenko wrote: >> Hi, >> >> I have local laptop with finger scanner and have remote server. >> >> Can I login over ssh and authorize by fingerprint? > > do you want this as a gimmick, or as a real security feature? real security feature. > one way to do this (the gimmicky one) is to have public key auth on ssh, and > have a program on the laptop that unlocks/decrypts your key only if it gets > the right fingerprint. > However, if an attacker were to steal your laptop, he could reverse said > program to decrypt your private key without needing your fingerptint, so its > not really any more secure than having a decrypted private key on your laptop > > for real security, you would need to implement the fingerprint matching on a > secure system (not your laptop) Can you provide some more info what I want to do. I could implement, but don't know from what start. I.e. would be good if I will know all, what I should write. New pam module or what. > regards > Pavel Herrmann
-- -Igor Gnatenko _______________________________________________ fprint mailing list fprint@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/fprint
