ting both credentials would be rather rare....
Also, you should not reveal an active alternative authentication method=20
in a customer's account to alleged customer, as extra layer of security.=20
The customer should offer the authentication keys without social=20
engineering you.
--G
From sjb.walker@??? Sat Jul 07 19:45:55 2012
Received: from mail-qc0-f176.google.com ([209.85.216.176])
by mail.bitfolk.com with esmtps (TLS1.0:RSA_ARCFOUR_SHA1:16)
(Exim 4.72) (envelope-from <sjb.walker@???>)
id 1Snax1-00089Y-2D
for users@???; Sat, 07 Jul 2012 19:45:55 +0000
Received: by qcsc21 with SMTP id c21so7059713qcs.21
for <users@???>; Sat, 07 Jul 2012 12:45:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
h=mime-version:in-reply-to:references:date:message-id:subject:from:to
:content-type; bh=LJ/0qDW/IZnfApc1gRyAb8ImxwYXygJ3uT+odAinssc=;
b=OPOisL8CyyaCDQ7uBm3xBZerYpQXPWbsnnsR/y7U8OEdL8kJtEigbTPMRN+zObms5P
oockV5bGDjfe4oJatNGbA6lt22b1KE6ABF8QWzoPCt+vAY+bJk40I7hoQT/XyhMo5R4A
5GjNSQYQk4FlJ/LZZOl+HNANfgRwCuTI4Wo1CYXWr+hhZOC/o/gO1p1rw+9C2dJsswve
2UbrYliFZB+29P4Wja6CucXFRRF58TimoTzBGWspkZ0nU7hpsBadR9L+BlVGqPCklWB5
XfETgcnJWYW072AClL1JYg97Uc5qw1EetghRp9cIByOBuuX9YE3msf85Ty7NPJ85EgEV
EUeg==
MIME-Version: 1.0
Received: by 10.229.135.20 with SMTP id l20mr18216352qct.83.1341690347566;
Sat, 07 Jul 2012 12:45:47 -0700 (PDT)
Received: by 10.229.237.149 with HTTP; Sat, 7 Jul 2012 12:45:47 -0700 (PDT)
In-Reply-To: <mailman.1304.1341682707.1691.users@???>
References: <mailman.1304.1341682707.1691.users@???>
Date: Sat, 7 Jul 2012 16:45:47 -0300
Message-ID: <CAORZ3UDbjDn4CeQ48inV1J0gRD1-uwUABwLnKQBGySOWgeXqdg@???>
From: Steven Walker <sjb.walker@???>
To: users@???
Content-Type: text/plain; charset=UTF-8
X-Virus-Scanner: Scanned by ClamAV on mail.bitfolk.com at Sat,
07 Jul 2012 19:45:55 +0000
X-SA-Exim-Connect-IP: 209.85.216.176
X-SA-Exim-Mail-From: sjb.walker@???
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
spamd3.lon.bitfolk.com
X-Spam-Level:
X-Spam-ASN: AS15169 209.85.128.0/17
X-Spam-Status: No, score=-0.8 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
DKIM_VALID_AU, RCVD_IN_DNSWL_LOW,
SPF_PASS shortcircuit=no autolearn=disabled version=3.3.1
X-Spam-Report: * -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at
http://www.dnswl.org/, low * trust
* [209.85.216.176 listed in list.dnswl.org]
* -0.0 SPF_PASS SPF: sender matches SPF record
* -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's * domain
* -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
* 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
* valid
X-SA-Exim-Version: 4.2.1 (built Mon, 22 Mar 2010 06:51:10 +0000)
X-SA-Exim-Scanned: Yes (on mail.bitfolk.com)
Subject: Re: [bitfolk] users Digest, Vol 45, Issue 2
X-BeenThere: users@???
X-Mailman-Version: 2.1.13
Precedence: list
List-Id: Users of BitFolk hosting <users.lists.bitfolk.com>
List-Unsubscribe: <https://lists.bitfolk.com/mailman/options/users>,
<mailto:users-request@lists.bitfolk.com?subject=unsubscribe>
List-Archive: <http://lists.bitfolk.com/lurker/list/users.html>
List-Post: <mailto:users@lists.bitfolk.com>
List-Help: <mailto:users-request@lists.bitfolk.com?subject=help>
List-Subscribe: <https://lists.bitfolk.com/mailman/listinfo/users>,
<mailto:users-request@lists.bitfolk.com?subject=subscribe>
X-List-Received-Date: Sat, 07 Jul 2012 19:45:55 -0000
Could you ask them to add a simple message to their home directory via
ssh thus proving they have access to the account?
Google do something similar, asking customers to add a randomly
generated subdomain to the dns records.
Steve
From andy@??? Sat Jul 07 19:48:05 2012
Received: from andy by mail.bitfolk.com with local (Exim 4.72)
(envelope-from <andy@???>) id 1Snaz7-0008Ln-1U
for users@???; Sat, 07 Jul 2012 19:48:05 +0000
Date: Sat, 7 Jul 2012 19:48:05 +0000
From: Andy Smith <andy@???>
To: users@???
Message-ID: <20120707194804.GD11695@???>
References: <mailman.1304.1341682707.1691.users@???>
<CAORZ3UDbjDn4CeQ48inV1J0gRD1-uwUABwLnKQBGySOWgeXqdg@???>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-ripemd160;
protocol="application/pgp-signature"; boundary="opU1cLy5W6t5oyvs"
Content-Disposition: inline
In-Reply-To: <CAORZ3UDbjDn4CeQ48inV1J0gRD1-uwUABwLnKQBGySOWgeXqdg@???>
OpenPGP: id=BF15490B; url=http://strugglers.net/~andy/pubkey.asc
X-URL: http://strugglers.net/wiki/User:Andy
User-Agent: Mutt/1.5.20 (2009-06-14)
X-Virus-Scanner: Scanned by ClamAV on mail.bitfolk.com at Sat,
07 Jul 2012 19:48:05 +0000
X-SA-Exim-Connect-IP: <locally generated>
X-SA-Exim-Mail-From: andy@???
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
spamd3.lon.bitfolk.com
X-Spam-Level:
X-Spam-ASN:
X-Spam-Status: No, score=-0.0 required=5.0 tests=NO_RELAYS shortcircuit=no
autolearn=disabled ve
