<div class="gmail_quote">On Tue, Jun 23, 2009 at 7:05 PM, Rob Scheepmaker <span dir="ltr"><<a href="mailto:r.scheepmaker@student.utwente.nl">r.scheepmaker@student.utwente.nl</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Hello everybody,<br>
<br>
[cut] <br></blockquote><div><br>Hi Rob,<br>just a quick comment about identifying remote machines. What about combining public key authentication with the bluetooth pairing method (the host writes a PIN, the client is asked for the PIN, the two PINs must match)?<br>
This way if the user is too lazy to check the public key we reduce greatly the attacker's possibilities. Using this approach we'd have to face the fact that a lazy user could write "1234" as a PIN, too: the host side UI for writing the PIN should warn the user that things like "1234" are not such a good idea.<br>
</div></div><br><br>Bye,<br>Fabrizio.<br>