verify the public key download corresponds with access request

Open tuxlife opened this issue 10 years ago • 1 comments

if anyone get direct access to the even-private key, it is possible to use the grant-ssh-access without piu/even request.

even should create an uniq request identifier, to verify the public key download.

Gets even a request without this ID, must even, depending on the account, reject the request or log

Jun 25 '15 18:06 tuxlife

:+1:

Jun 25 '15 19:06 hjacobs