[47577] in Cypherpunks
Re: authenticating intrahost crypto providers
daemon@ATHENA.MIT.EDU (James A. Donald)
Sat Jan 20 03:38:56 1996
Date: Sat, 20 Jan 1996 12:26:16 -0800
To: jleppek@suw2k.hisd.harris.com (James Leppek), cypherpunks@toad.com
From: "James A. Donald" <jamesd@echeque.com>
At 11:37 AM 1/18/96 EST, James Leppek wrote:
>
> I have been doing some research on the development of an abstract
> security services API(not just a CAPI) and have hit a road block.
> The problem revolves around the need to authenticate a
> security service provider to an application.
No such need.
If the attacker can introduce his own module to supply crypto services
then he must have administrator (NT equivalent of root) privileges,
in which case your are stuffed regardless.
---------------------------------------------------------------------
|
We have the right to defend ourselves | http://www.jim.com/jamesd/
and our property, because of the kind |
of animals that we are. True law | James A. Donald
derives from this right, not from the |
arbitrary power of the state. | jamesd@echeque.com
