Linux-Hams archive - August 1998: Password Security

Password Security

Mike Bilow (EEST)
Thu, 13 Aug 98 19:50:00 -0000


Andrew H. Fagg wrote in a message to Mike Bilow:

AHF> ssh -c 'none' should allow you to login to a machine while
AHF> providing secure authentication (it is intended as a secure
AHF> replacement for rlogin and rsh). With the 'none' option, it
AHF> does not encrypt the data stream. Make sure you configure
AHF> things properly - it appears that passwords are still sent
AHF> in the clear (so you will want to use an rhosts file to
AHF> avoid the need for passwords).

If RSA authentication is used even with encryption disabled, it harms nothing
to do it in the clear. This is the whole point of "public key" cryptography.

-- Mike