Re: [Fed-Talk] CAC Public Key Server
Re: [Fed-Talk] CAC Public Key Server
- Subject: Re: [Fed-Talk] CAC Public Key Server
- From: Brian Raymond <email@hidden>
- Date: Wed, 16 Nov 2005 23:59:32 -0500
- Thread-topic: [Fed-Talk] CAC Public Key Server
On 11/16/05 9:47 PM, "Timothy J Miller" <email@hidden> wrote:
Deleted..
> There's also the Global Directory Service (GDS) at
> dod411.chamb.disa.mil. The base DN would be ou=dod,o=u.s.
> government,c=us. This should have all DoD members, so it can be a
> bit difficult to use. I suggest using an LDAP browser to locate the
> sub-trees you need and adding those search bases to Address Book as
> LDAP entries.
>
> IIRC, GDS is .mil-restricted. No, that doesn't make any sense to me
> either.
I wanted to chime in on this one because I notified the GDS team it was
publicly accessible a couple of years ago now. They have a web interface
which is restricted with PKI authentication ( https://dod411.chamb.disa.mil/
) however LDAP still isn't requested to .mil. Given the protections put
around the knowledge of command personnel, phone numbers and other
information having GDS publicly accessible is a nice way to circumvent all
of those restrictions. It's nice to be able to programmatically download
800,000+ objects from GDS giving someone a nice directory of who works for
what organization, department, email, moving forward phone numbers and other
goodies. I'm more for freedom of information then most but is it a
responsible action to have all of that information public with no
restrictions on it at all?
If I were attempting to data mine to cause trouble for different DoD
employees this is a good place to start.
- Brian
>
> -- Tim
>
> _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Fed-talk mailing list (email@hidden)
> Help/Unsubscribe/Update your Subscription:
>
> This email sent to email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden