From: "Perry E. Metzger" <pmetzger@lehman.com>
Date: Wed, 2 Mar 94 08:55:09 PST
To: smb@research.att.com
Subject: Re: low-overhead encrypted telnet
In-Reply-To: <9403021646.AA21038@toad.com>
Message-ID: <9403021654.AA21811@andria.lehman.com>
MIME-Version: 1.0
Content-Type: text/plain



smb@research.att.com says:
> 	 Although running an encrypted IP stack does require sysadmin
> 	 cooperation, it does not require a kernel rebuild -- John Ioannidis
> 	 has built modloadable versions of most of the swIPe software.
> 
> Assuming, of course, that you're running a system that has modload.
> (Ironically, CERT has recommended that you delete loadable device drivers
> from systems that don't need them, as a way to guard against password-
> sniffers.)

A short sighted view. You can't stop line monitoring -- you should
defend against it with encryption instead. In an environment like
mine, there are literally thousands of potential line monitoring
points that I cannot defend, but encryption gives me real security.

Perry