[2610] in Kerberos
Re: Re: Kerberos 5 & login
daemon@ATHENA.MIT.EDU (Dean Anderson)
Fri Feb 26 17:44:58 1993
From: dean@ksr.com (Dean Anderson)
To: lidl@uunet.uu.net (Kurt J. Lidl)
Cc: bcn@ISI.EDU (Clifford Neuman), bf4grjc@bell-atl.com, tytso@Athena.MIT.EDU,
In-Reply-To: Your message of "Thu, 25 Feb 93 17:32:12 EST."
Date: Fri, 26 Feb 93 14:37:15 EST
One possibility in the area of Xterms is to use a 10baseT etherswitch.
The packets from one line go to the destination line and nowhere else
(hence it is faster). Ethernet broadcasting does not really happen
any more (unless a packet is sent to the broadcast address), so if the
cpu server running the xdm is also connected directly to the ether
switch, your packets are as secure as the physical lines from the
xterm to the cpu server. Of course, if the physical lines are tapped,
or you xdm server is on a real broadcast ethernet, the packets are
still cleartext.
--Dean
Dean Anderson dean@ksr.com | Support the League for
KSR Computing Facilities | Programming Freedom! Email
Kendall Square Research | lpf@uunet.uu.net for info.
