|
Du weisst, dass Blogs doch irgendwie zu Dir durchdringen, wenn Du beim Blick auf dein Mobiltelefon glaubst Dein Provider hieße "Vodkamelone".
-- Nilsk Ketelsen im IRC SucheWo ist ixs?Aktuelle EinträgeHow to recover an ASUS WL-330N3G mobile access point
Donnerstag, Februar 23 2012 A little shell spinner Dienstag, September 13 2011 FrOSCon Sonntag, August 28 2011 Fedora 15, not as bad as people claim... Mittwoch, März 9 2011 Monitoring a Snom phone with MRTG through SNMP Freitag, Januar 28 2011 Link ListLetzte Google Sucheeeupdate.exe intel
vodkamelone Busybox Rittal master centos 5 memory requirements intel e1000 firmware fix wodka wassermelone real h1 wodka boot virtualbox usb add ixs droge rb532 openwrt kernel telefoncode siemens m65 fedora diskboot.img eeupdate.exe intel telefoncode mikrotik routerboard dd routerboard linux rittal cmc openwrt rb433 dd-wrt+e1000+voip tasca vodka melone openwrt rb750 reset configuration ixs Telefoncode von Siemens handy blöd dir deine meinung Minimum Red Hat Package mrtg asiemens Telefon Code mrtg thro raid recovery s65 Telefon-Code install openwrt 433 e1000 intel rb532a ddwrt telefoncode siemens m65 siemens s65 telefon code gesperrt openwrt fedora 15 what is a moderate automatic preference openwrt scp no space raid recovery c65 adressbuch löschen telefon code siemens sk65 redhat minimum packages telefoncode VoVPN-Gateway passwort virtualbox fedora 14 openwrt format nand routerboard kickstart disable ipv6 1 remove dbus rhel c75 telefoncode zurücksetzen KategorienLast played...Song: Wavesamples & Soul (7-16-2009) Artist: Jon Zdanis 21. November 2011, 01:25 Song: Cafe Del Mar Artist: Nacho Sotomayor 1. November 2011, 20:34 Song: Music For A Found Harmonium Artist: Penguin Cafe Orchestra 1. November 2011, 20:31 Song: Easter Song Artist: A Man Called Adam 1. November 2011, 20:23 Song: Second Hand Artist: Underworld 1. November 2011, 20:14 20. Mai 2012, 20:25
|
Sonntag, 11. März 2007SSH Null Cipher? Yes, please!Trackbacks
Trackback für spezifische URI dieses Eintrags
Keine Trackbacks
Kommentare
Ansicht der Kommentare:
(Linear | Verschachtelt)
Personally, I would never trust a tunnel to a "secure network", because I don't belive in such beasts. Proper usage of end-to-end security systems like SSH, Kerberos and SSL ensures that data is encrypted and also authenticated all the way from the source to the destination.
Sure, some would agree that an VPN or IPSEC is good enough, but I think it's not really worth it to give people that option. A better soulution is to integrate the end-to-end security protocol with the tunneling protocol. That is, you start by letting SSH or whatever do its job and secure the connection. Then, if it detects that there's a connection between host A and B and both hosts are doing both IPSEC and SSH, then the SSH context can be used to do an extra verification of the IPSEC keys and then SSH can stop encrypting. Of course, that doesn't work when the tunnel endpoint isn't at your SSH server, but as I said, I don't trust "secure networks" anyway. ;) |