CC: undisclosed-recipients: ;
MIME-Version: 1.0
In-Reply-To: <rt-3.8.6-2430-1412785523-670.37410-4-0@isc.org>
Content-Disposition: inline
References: <RT-Ticket-37410@isc.org> <543560E8.5070902@redhat.com> <rt-3.8.6-2430-1412785523-670.37410-4-0@isc.org>
Message-ID: <20141008162921.GA94471@isc.org>
Content-Type: text/plain; charset="utf-8"
X-RT-Original-Encoding: utf-8
Received: from bikeshed.isc.org (bikeshed.isc.org [149.20.48.19]) by bugs.isc.org (Postfix) with ESMTP id 46E5F2D2004F for <bind9-bugs@bugs.isc.org>; Wed,  8 Oct 2014 16:29:21 +0000 (UTC)
Received: by bikeshed.isc.org (Postfix, from userid 10292) id 39C76216C3B; Wed,  8 Oct 2014 16:29:21 +0000 (UTC)
Delivered-To: bind9-bugs@bugs.isc.org
User-Agent: Mutt/1.4.2.3i
Subject: Re: [ISC-Bugs #37410] PKCS#11 PIN length is silently limited to 32 characters [patch]
Return-Path: <each@isc.org>
X-Original-To: bind9-bugs@bugs.isc.org
Date: Wed, 8 Oct 2014 16:29:21 +0000
To: Francis Dupont via RT <bind9-bugs@isc.org>
From: Evan Hunt <each@isc.org>
RT-Message-ID: <rt-3.8.6-2438-1412785761-1794.37410-0-0@isc.org>
Content-Length: 202

> => 1023 octets are a very large value for a PIN. BTW
> with an enforced low limit of retries a short (4 digits) value
> is common, i.e.:

Seems reasonable, since HSM PINs are always 1234 anyway. :)