Great Circle Associates Firewalls
(November 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Plain-text passwords
From: Ron DuFresne <dufresne @ parka . winternet . com>
Date: Thu, 7 Nov 1996 18:36:04 -0600 (CST)
To: Todd Graham Lewis <lists @ reflections . mindspring . com>
Cc: "Jonathan M. Bresler" <jmb @ FRB . GOV>, Lawrence Beobachter <larry @ spmu . runnet . ru>, firewalls @ GreatCircle . COM
In-reply-to: <Pine . LNX . 3 . 91 . 961107174412 . 294H-100000 @ reflections . mindspring . com>

On Thu, 7 Nov 1996, Todd Graham Lewis wrote:

> On Thu, 7 Nov 1996, Jonathan M. Bresler wrote:

	[SNIP]
> 
> SSH is nice, but unless you fork out $500 (or whatever datafellows is 
> charging this week) for a license for RSA, it is illegal to use in a 
> commercial context.
> 

Not all that pricey if the cost is only $500 to make one feel a bit warm 
and comfy...

> We are moving to Kerberos, and I for one love it.  ftp://athena-dist.mit.
> edu/pub/kerberos/README for instructions on how to get it.
> 

My limited understnading and reading about kerberos is that it is NOT an 
all-in-one solution.  It's not the way to make one machines deamons talk 
with anothers, and, in multi-user machine environs, the kerberos tickeyts 
are plaintext and stealable by someone other than the owner...

Later,

Ron DuFresne
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation." -- Johnny Hart
	***testing, only testing, and damn good at it too!***

OK, so you're a Ph.D.  Just don't touch anything.



Follow-Ups:
References:
Indexed By Date Previous: Re: Plain-text passwords
From: Todd Graham Lewis <lists @ reflections . mindspring . com>
Next: Re: POP3 proxy
From: Todd Graham Lewis <lists @ reflections . mindspring . com>
Indexed By Thread Previous: Re: Plain-text passwords
From: Todd Graham Lewis <lists @ reflections . mindspring . com>
Next: Re: Plain-text passwords
From: Todd Graham Lewis <lists @ reflections . mindspring . com>

Google
 
Search Internet Search www.greatcircle.com