From owner-freebsd-security Mon Jun 28 12:31:38 1999 Delivered-To: freebsd-security@freebsd.org Received: from phoenix (phoenix.aye.net [206.185.8.134]) by hub.freebsd.org (Postfix) with SMTP id 2F81C14FAF for ; Mon, 28 Jun 1999 12:31:34 -0700 (PDT) (envelope-from barrett@phoenix.aye.net) Received: (qmail 18934 invoked by uid 1000); 28 Jun 1999 19:29:39 -0000 Received: from localhost (sendmail-bs@127.0.0.1) by localhost with SMTP; 28 Jun 1999 19:29:39 -0000 Date: Mon, 28 Jun 1999 15:29:39 -0400 (EDT) From: Barrett Richardson To: Dan Langille Cc: security@freebsd.org Subject: Re: ssh from windows In-Reply-To: <19990624074719.OAVT688839.mta2-rme@wocker> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Thu, 24 Jun 1999, Dan Langille wrote: > > The password you enter is the password for your account. > > Granted. I was worried they were transmitting the password in clear text. Oh. The client encrypts it with the public key sent by the server - but the server's private key isn't passphrase protected (it is, however, readable only by root -- unless you change it). - Barrett > -- > Dan Langille - DVL Software Limited > The FreeBSD Diary - http://www.FreeBSDDiary.org/freebsd/ > NZ FreeBSD User Group - http://www.nzfug.nz.freebsd.org/ > The Racing System - http://www.racingsystem.com/racingsystem.htm > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message