| http://www.w3.org/ns/prov#value | - To strenghten the scenario, the script itself has to be secured (otherwise it is no better than a cleartext passphrase, or no passphrase), so it would have to ask for the passphrase to a second server that has some means to ascertain whether the request is legitimate or not.
|