From owner-cvs-all Mon Jun 18 9:48:46 2001 Delivered-To: cvs-all@freebsd.org Received: from Awfulhak.org (gw.Awfulhak.org [217.204.245.18]) by hub.freebsd.org (Postfix) with ESMTP id D6CC837B401; Mon, 18 Jun 2001 09:48:37 -0700 (PDT) (envelope-from brian@Awfulhak.org) Received: from hak.lan.Awfulhak.org (root@hak.lan.Awfulhak.org [172.16.0.12]) by Awfulhak.org (8.11.4/8.11.4) with ESMTP id f5IGmaF13504; Mon, 18 Jun 2001 17:48:36 +0100 (BST) (envelope-from brian@lan.Awfulhak.org) Received: from hak.lan.Awfulhak.org (brian@localhost [127.0.0.1]) by hak.lan.Awfulhak.org (8.11.4/8.11.4) with ESMTP id f5IGmZh07377; Mon, 18 Jun 2001 17:48:35 +0100 (BST) (envelope-from brian@hak.lan.Awfulhak.org) Message-Id: <200106181648.f5IGmZh07377@hak.lan.Awfulhak.org> X-Mailer: exmh version 2.3.1 01/18/2001 with nmh-1.0.4 To: Kris Kennaway Cc: Mikhail Teterin , brian@FreeBSD.org, cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org, brian@Awfulhak.org Subject: Re: cvs commit: src/usr.sbin/ppp ccp.c ccp.h command.c deflate.c fsm.c fsm.h ip.c mppe.c ppp.8 pred.c In-Reply-To: Message from Kris Kennaway of "Mon, 18 Jun 2001 09:31:00 PDT." <20010618093100.D9834@xor.obsecurity.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Mon, 18 Jun 2001 17:48:35 +0100 From: Brian Somers Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG > On Mon, Jun 18, 2001 at 11:24:10AM -0400, Mikhail Teterin wrote: > > On 18 Jun, Brian Somers wrote: > > > brian 2001/06/18 08:00:24 PDT > > > > > > Modified files: > > > usr.sbin/ppp ccp.c ccp.h command.c deflate.c fsm.c > > > fsm.h ip.c mppe.c ppp.8 pred.c > > > Log: > > > Add support for stateful MPPE (microsoft encryption) providing > > > encryption compatibility with Windows 2000. Stateful encryption > > > uses less CPU but is bad on lossy transports. > > > > So, I suppose, I'll now be able to avoid using SSH and use PPP > > with encryption over a device like host:port/tcp directly, without > > the > > set login "!ssh tunnel@host" > > > > Great! Thanks, > > Only if you trust microsoft not to have screwed up the crypto, like > they usually do with their protocols. I think most Microsoft stuff is functional, and MPPE seems to fall into this category. However I've never implemented a Microsoft protocol that hasn't screwed up at some point (clearly to avoid development costs). I have no idea why they chose to f**k with the CCP reset request idea though !!! (*spit*) > Kris -- Brian Don't _EVER_ lose your sense of humour ! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message