-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Marcus,

Milanez, Marcus wrote:
> Microsoft seems to have a good solution for that. The 'keys' are
> associated with na specific domain account... What do you think:
> http://msdn2.microsoft.com/en-us/library/ms995355.aspx

I don't see this as a solution. Just because the operating system
provides encryption for you doesn't mean that ultimately the credentials
have to come from either the keyboard (nice and secure, but a total PITA
for any system administrator) or from a cleartext file.

I'd /love/ to hear a proposal that even remotely solves this problem
with NEITHER a cleartext password NOR a hand-entered password on the
console. So far, I haven't heard of one, and I can't think of one myself.

- -chris

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGxflx9CaO5/Lv0PARAilwAKDELMTBFIz1PX4KSb7TkAyil8nH6gCeKV5I
ep8aA/BX2SXiec/WZ3nxr1c=
=ywTS
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to