Re: Smart card connection pgAdmin/PostgreSQL

From: Jean-Michel Pouré - GOOZE <jmpoure(at)gooze(dot)eu>
To: pgadmin-hackers(at)postgresql(dot)org
Subject: Re: Smart card connection pgAdmin/PostgreSQL
Date: 2010-03-17 13:28:16
Message-ID: 1268832496.18665.6.camel@acer
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgadmin-hackers

Le mercredi 17 mars 2010 à 13:13 +0000, Dave Page a écrit :
> I assume
> it's possible to store an SSL private key on them for authentication
> against a remote server?

Yes, this is the basic feature.

It is also possible to use the smartcard chip to make crypto operations,
thus offering superior decryption/encryption security.

At no moment, the private keys leave the key. Thus there is very little
possibility to steal secrets. Even on a compromised computer, the
secrets cannot be stolen. To connect, you need a smart card and the PIN
code.

Also, you may think of server-side data encryption, where tables are
encrypted.

In some companies, data are considered like the heart of the activity.
In these business it may be valuable to use smart cards.

Kind regards,
Jean-Michel
--
Jean-Michel Pouré - jmpoure(at)gooze(dot)eu

Responses

Browse pgadmin-hackers by date

  From Date Subject
Next Message Dave Page 2010-03-17 14:12:17 Re: Smart card connection pgAdmin/PostgreSQL
Previous Message Jean-Michel Pouré - GOOZE 2010-03-17 13:14:04 Donation of 3 FEITIAN PKI smart cards to the pgAdmin community