esc by default?

[Rahul Sundaram]

John Dennis wrote:
> David Zeuthen wrote:
>> On Fri, 2007-10-05 at 11:44 -0400, seth vidal wrote:
>>> On Fri, 2007-10-05 at 11:26 -0400, David Zeuthen wrote:
>>> I think the point we're making here is that we need to find a happy
>>> balance. I think smart cards are obscure enough to not include them by
>>> default.
>>
>> Maybe. But it shouldn't have to be that way; smart cards (or anything
>> where you verify more than one thing about the user (e.g. the classic
>> something you a) have; b) know; c) are) are inherently more secure than
>> just passwords and SSH keys. Hence, I think we should be interested in
>> getting this working. Same for thinkfinger; people are doing very good
>> work at integrating this into the distro.
> 
> Everything Red Hat is doing is driving towards the use of stronger 
> authentication. We have made huge monetary investments in this area. 

It be would useful if some of the investments were directed to not 
making ti start by default unnecessary.  The majority of end users in 
Fedora are unlikely to be using smart cards anytime soon unlike the 
audience for RHEL.

Rahul