Re: Security

[Mike Castle]

On Sun, Sep 16, 2001 at 08:37:26PM -0400, Stevie O wrote:
> The method I suggestion is no stronger than pserver is; it simply makes it 
> harder for someone to sniff the password off the network (which is 

Harder how?

I don't have to decrypt your DES encrypted password.

I just have to use my hacked cvs client to take your DES encrypted password
from the command line and use it directly.

It gains nothing.

This is what MS added to SMB.  And it didn't gain them anything either.

mrc
-- 
     Mike Castle      address@hidden      www.netcom.com/~dalgoda/
    We are all of us living in the shadow of Manhattan.  -- Watchmen
fatal ("You are in a maze of twisty compiler features, all different"); -- gcc