Re: [Openvpn-devel] RE: [Openvpn-users] openvpn, smartcards and PKCS#11

2005-09-07 Thread Erich Titl
Alon Alon Bar-Lev wrote: > ... > > In terms of security, there is no point of using a device that store keys > only to be extracted by applications. > In order to secure your identity you must use a device that cannot be > duplicated. > This can be implemented only if the device does not allow

RE: [Openvpn-devel] RE: [Openvpn-users] openvpn, smartcards and PKCS#11

2005-09-07 Thread Alon Bar-Lev
Erich Titl wrote: > Which implies that you send cleartext to the device and get cyphertext back. So the easiest way to tamper the message is to intercept it at > the smartcard driver level :-) and modify it on the fly. If someone is smart enough to fetch the key contents from memory while it is b

[Openvpn-devel] Bridging the really weird networks (NetBEUI only configuration)

2005-09-07 Thread mts . spb . suxx
Hello List, Is TAP-win32 designed to handle totally non-IP environment? I have a LAN (all-winXP-SP2) where all the file-sharing is done with NetBEUI. IP family is used only to access the external hosts through POP3, SMTP and HTTP[S]. "NetBIOS over TCP/IP" is disabled on all instances of