prompter type question
will.fiveash at oracle.com
Mon Mar 22 16:42:14 EDT 2010
On Sun, Mar 21, 2010 at 02:32:14PM -0500, Nicolas Williams wrote:
> On Sat, Mar 20, 2010 at 09:41:02PM -0400, Jeffrey Hutzelman wrote:
> > --On Thursday, March 18, 2010 03:17:20 PM -0500 Nicolas Williams
> > >>
> > >>Hmm.
> > >>I'd expect that hidden would be clear for OTP and possibly pin.
> > >
> > >I wouldn't! I'd expect prompts for secrets to be echo-off.
> > I'd expect echo for an OTP response, if it's at all complicated,
> > since the user doesn't actually _know_ it the way you (or your
> > fingers) know a PIN or password, and complex data entry without echo
> > can be quite error-prone.
> Perhaps. I use an OTP and a challenge/response OTP from time to time.
> I've never needed echo on.
I've found it handy to have echo on when using the token card that
generates a longish OTP for IKE authentication. It is easy to mistype
given this is a 10 (I think) character string that differs each time I
More information about the krbdev