[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Future of kerberised telnet, login, rsh, ftp?

>>>>> "Howard" == Howard Chu <hyc@highlandsun.com> writes:

    Howard> Good point, I run into this pretty often. (My brother
    Howard> complains about it all the time, working with many
    Howard> terabytes of science/image data.) But the fix is easy,
    Howard> just add a "null" cipher spec and select it with "ssh
    Howard> -c". Probably smarter in some cases is to add a
    Howard> checksum-only cipher so that you can still protect against
    Howard> hijacking.

Probably should use public key authentication too, so passwords are
transmitted in the clear.
Brian May <bam@snoopy.apana.org.au>