HP3000-L Archives

February 1996, Week 2

HP3000-L@RAVEN.UTC.EDU

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
James Hofmeister <[log in to unmask]>
Reply To:
James Hofmeister <[log in to unmask]>
Date:
Thu, 8 Feb 1996 16:12:44 GMT
Content-Type:
text/plain
Parts/Attachments:
text/plain (23 lines)
Hello Mark,
 
Mark Bixby ([log in to unmask]) wrote:
: In talking about network security here, we wondered if HP 3000 logons over a
: network via NS/VT transmitted the passwords typed by the user in unsecure,
: sniffable clear text similar to the way telnet does it.
 
: I advised taking the paranoid position of assuming clear text.  But then I
: wondered, maybe NS/VT is smart enough to recognize that display echo has
: been turned off and that a password is being requested (i.e. "ENTER USER
: PASSWORD:", not HELLO FOO/PASS.BAR), and so perhaps it might perform some
: encryption.  Yes?  No?
: --
 
Sorry for the news, ENCRYPTION? NO.  The password is sent as 'clear text'
as data in a VT message.
 
Regards,
 
James Hofmeister
Worldwide Technology Network Expert Center
P.S. My Ideals are my own, not necessarily my employers.

ATOM RSS1 RSS2