|
Posted by Alan J Rosenthal on June 15, 2007, 1:02 pm
If you were Registered and logged in, you could reply and use other advanced thread options
>In case (1) the resultant cert is DSA and needs a password.
>It seems that (1) is more secure, but it requires the password to be typed.
>Is there a way to prevent the interactive password typing?
The only reason it's "more secure" is because it requires the password to
be typed. Any mechanism for getting around this requirement constitutes
lowering the security so as to be identical. I agree with lowering the
security in this way, and I recommend doing so in the standard way, by
using your method #2 (empty passphrase).
|