From owner-freebsd-security Tue Oct 12 14: 5:32 1999 Delivered-To: freebsd-security@freebsd.org Received: from smtp1.free.fr (smtp1.free.fr [212.27.32.5]) by hub.freebsd.org (Postfix) with ESMTP id DD98B14DE9; Tue, 12 Oct 1999 14:05:26 -0700 (PDT) (envelope-from m.hallgren@free.fr) Received: from roam (paris11-nas4-48-252.dial.proxad.net [212.27.48.252]) by smtp1.free.fr (8.9.3/8.9.3/Debian/GNU) with SMTP id XAA32493; Tue, 12 Oct 1999 23:05:24 +0200 Message-ID: <002601bf14f5$9e2178c0$5b014b0a@asf.fr> From: "Michael Hallgren" To: "Kris Kennaway" Cc: "Donald Wilde" , References: Subject: Re: MD5 systems interacting with DES systems Date: Tue, 12 Oct 1999 23:06:12 +0200 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2314.1300 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > On Tue, 12 Oct 1999, Michael Hallgren wrote: > > > > I don't think this is correct. rlogin and friends do no encryption or > > > password authentication themselves, and aren't linked against libcrypt at > > > all. So there should be no difference whether or not you have DES > > > installed. > > > > Berkeley r* authenticates over source address, if I'm not seriously > > mistaken... > > Note I said password authentication ;-) Ok. Sorry, read quickly. However, passwords in cleartext over the bcast media... > > > > As for encrypted transport, which it sounds like you were talking about, > > > you want either ssh (if the license restrictions are applicable to you - > > > or you could port the "last truly free" version which the openbsd guys > > > have been cleaning up in their tree), > > > > Yes, nice. SSH's a VERY good replacement for r* 'and a host of other needs). > > The license terms can be a bitch, though :-( Yeah... ... > > > Anyone been trying out FreeS/WAN ? > > Not sure why you'd bother - KAME is the future for FreeBSD. Well, *BSD and the different bundles running over Linux are all my friends... :) mh > > Kris > > ---- > XOR for AES -- join the campaign! > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message