>I tried tcpdump on FreeBSD and it turned out that login information
>during telnet sessions as well as USER and PASS info sent by pop-client
>are both xmitted in plain text <shudder>.
Please realize that this is true of all internet applications
that do not use encryption. (telnet, ftp, pop, X11, there are so
many to chose from ;)
>Is there any solution besides S/Key (please, include pointers) to
>block this don't-know-how-to-call-it hole.
skey provides a one-time passwd, but does not provide encryption.
take a look at ssh for one way of dealing with this problem.
http://www.cs.hut.fi/ssh/
jmb
--
Jonathan M. Bresler 202-452-2831 breslerj @
frb .
gov
MS-169 Federal Reserve Board of Governors Washington DC 20551
Speaking for myself. Others speak for the Federal Reserve Board of Governors
Follow-Ups:
References:
|
|
