[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: MAC-based ssh



hi,

using mac addresses for client authentication seems to me as an extremely
risky business as a mac address can easily be copied/cloned/spoofed...
imho, it does not offer any authentication at all...

g.

On Fri, 2 May 2003, Hans van Leeuwen wrote:

> Hello,
>
> My company has created an application that allows remote users to edit
> their DNS-records. This app needs to restart bind on the remote
> nameservers.
>
> I have decided to do this thrue SSH by putting the client key in
> authorized_keys2. But this seems a little risky, so I was wondering if
> it was possible to get sshd to only allow the client MAC-address.
>
> I've looked around, but for some reason search-engines tend to send me
> to www.apple.com ;-)
>
> Hans



Reply to: