search for: standardazt

...RSA method is good because it doesn't rely on the (frequently non)secrecy of passwords. It's primary disadvantage is that using it correctly requires a PKI of some form (be it x.509 certs, GPG signed copies, manual key population) to be secure. Considering the complexity, cost, and lack of standardaztion, *most* orgs will are not and will not be using RSA keys anytime in the forseable future. Passwords are well understood, by both crypto/security heads and by the common man. Often passwords are not a very good form of authentication, because of their very nature. However, due to their simplicit...