[Ubuntu-be] [OT] RSA encryption?

[Wouter Horré]

On Tuesday 20 March 2007 14:59, Laurent RICHARD wrote:
> On Tue, 20 Mar 2007 09:30:41 +0100, Wouter Horré wrote
>
> > On Monday 19 March 2007 23:02, Laurent RICHARD wrote:
> > > ING : Expensive but RSA encryption
> >
> > What do you mean with RSA encryption? As far as I know, almost all
> > SSL handshakes use RSA. And, RSA should never be used for encrypting
> > a complete session.
>
> Little module to install which generate your own RSA keys (exportable to
> others computer. At connection, the client and the server link to enable
> access to the PC banking accounts.

Is this an advantage or a disadvantage?

Personally, I prefer the system dexia (and some other banks) are using. The 
RSA key is located on your debet card and a card reader is used to do a 
challenge/response authentication. This requires zero installation and is 
100% compatible with linux. The only requirement is a browser with ssl and 
javascript support. 

I find it very handy because I use many computers (at home, at work, at my 
parents, ...) with both linux and windows. I also think it's one of the 
safest methods, because the RSA key is on your card and can't leave it. If 
you loose your card, you call card stop (you do this anyway) and you are sure 
nobody can access your online banking.

g.
Wouter
-- 
http://wouter.horre.be/