From owner-freebsd-questions  Sat Mar 23  2:37: 3 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from glow.binity.net (glow.binity.net [213.84.201.224])
	by hub.freebsd.org (Postfix) with ESMTP id 7367837B400
	for <FreeBSD-questions@FreeBSD.ORG>; Sat, 23 Mar 2002 02:37:00 -0800 (PST)
Received: from vscan (glow.dt1.binity.net [172.23.18.1])
	by glow.binity.net (Postfix) with ESMTP
	id 1105655BC; Sat, 23 Mar 2002 11:37:09 +0100 (CET)
Received: from there (silver.dt1.binity.net [172.23.3.20])
	by glow.binity.net (Postfix) with SMTP
	id 5701E559D; Sat, 23 Mar 2002 11:37:07 +0100 (CET)
Content-Type: text/plain;
  charset="iso-8859-1"
From: Walter Hop <walter@binity.com>
Message-Id: <200203231126.56275@silver.dt1.binity.net>
To: "Charles Burns" <burnscharlesn@hotmail.com>, shovey@buffnet.net,
	csfbsd@raggedclown.net
Subject: Re: So long and thanks for all the fish
Date: Sat, 23 Mar 2002 11:36:49 +0100
X-Mailer: KMail [version 1.3.2]
Cc: FreeBSD-questions@FreeBSD.ORG
References: <F61GQUEYvZmDvHbYxPo0000a6bd@hotmail.com>
In-Reply-To: <F61GQUEYvZmDvHbYxPo0000a6bd@hotmail.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Virus-Scanned: by glow.binity.net (amavis-perl-11-sky2)
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

[in reply to Charles Burns, Saturday 23 March 2002 08:32]

> Thinking about it, are there really any compelling reasons to use SSH
> for most tasks (like command shells) when the likelyhood of being
> packet sniffed is (in most environments) far lower than the likelyhood
> of a serious security flaw popping up in SSH, which happens
> occasionally? 

Another nice and lesser known feature of SSH is that it protects you from 
other parties pretending to be the host, by means of a private host key 
that only the server knows. If the actual host key is not what it 
expects, ssh will complain or abort.

Don't forget that FreeBSD's telnetd was the object of one of the big 
exploits last year!

-- 
 Walter Hop <walter@binity.com> | +31 6 24290808 | PGP keyid 0x84813998
 

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message