Subject: IMPORTANT: Mandatory password and ssh key change by 2011-11-30

[Richard W.M. Jones]

On Wed, Oct 12, 2011 at 02:18:20PM -0600, Kevin Fenzi wrote:
> On Wed, 12 Oct 2011 22:13:11 +0200
> Tomas Mraz <tmraz at redhat.com> wrote:
> 
> > 
> > OK, but then you should not penalize also the people who keep their
> > SSH private keys only on safe private computers.
> 
> We're sorry if it's causing you inconvenience. We have no way at all to
> tell apart the groups of people who understand keys and crypto and best
> practices from the people who should read the docs and information and
> learn about them. 
> 
> If even just a few people learn and improve their practices, isn't it
> worth the small trouble to those that already understand? 

Not really.  How is this going to change the behaviour of the
people who don't use good practices?

Rich.

-- 
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
Read my programming blog: http://rwmj.wordpress.com
Fedora now supports 80 OCaml packages (the OPEN alternative to F#)
http://cocan.org/getting_started_with_ocaml_on_red_hat_and_fedora