[Psi-devel] Re: Re: Remote Controlling Psi

Remko Troncon remko.troncon at cs.kuleuven.ac.be
Sun Jan 2 02:20:39 PST 2005


> What about GnuPG/OpenPGP support? Only accept encrypted messages for
> commands. Is that possible? The server admin usually can't do that.

I'm not an expert at this, but i'm still not convinced this improves the
situation. Suppose that you encrypt and sign a command execution request
(say 'reboot'). If i'm not mistaken, the admin can intercept this
package, and send it to you at a later time, and as such
execute the command for you; of course, he would probably not know what
command he actually sent but he would have gotten your machine to
reboot.

cheers,
Remko


More information about the Psi-devel-affinix.com mailing list