In message <9405021504 .
ZM16049 @
yeager .
corp .
sgi .
com>, Eliot Lear writes:
>I think it's important to stress that network level security is in
>some sense orthoganol to application layer security. Used today,
>network layer security provides end to end privacy to the network
>code. It does you no good to have that privacy if the hosts on
>either end leak like sieves.
>
amen brother.
Besides, if something is encrypted don't waste your time breaking
the crypto but go after the keys. Keys are kept by application
level programs protected by Unix permission bits.....wow.
(According to Garfinkel and Spafford "Practical Unix Security"
footnote page 282, this is a big problem with Kerberos)
dreez
References:
-
Re: NATs
From: lear @
yeager .
corp .
sgi .
com (Eliot Lear)
|
|
