Re: How secure is SSH ?

From: Dazz (cashdj@hotmail.com)
Date: 06/27/02 

From: cashdj@hotmail.com (Dazz)
Date: Thu, 27 Jun 2002 02:12:19 GMT

On Wed, 26 Jun 2002 21:22:41 GMT, a rather disgusting and pathetic
creature named Archangel was seen shoving live gerbils down his own
underpants, while "cj101" <sg@att.com> giggled and pointed at him.

>How secure is SSH ? I've heard excellent things about SSH, but not really
>how it would fare against a good sniffer (Sniffer 4.7 & Airopeek) for WLANs.

Hmmmm, how secure is anything?

Nothing is completely secure, but that doesn't mean that you should
make it easy for people who want to compromise your systems.

There has been at least one SSH vulnerability discovered:
http://www-arc.com/sara/cve/SSH_vulnerabilities.html
http://www.cert.org/advisories/CA-1998-03.html

Some SSH info:

http://www.ssh.com/faq/
http://www.free.lp.se/fish/rfc.txt

>I've also thought about implementing an SSL solution, but isn't that only
>for Internet traffic (proxy) and not LAN traffic?

To quote from the SSL Faq:

SSL stands for Secure Sockets Layer, and it is the industry standard
method for protecting web communications developed by Netscape
Communications Corporation. The SSL security protocol provides data
encryption, server authentication, message integrity, and optional
client authentication for a TCP/IP connection.

http://www.ssl.com/

>Thanks again for your thoughts and any URLs/white papers to read.

There's plenty of information and products available for your needs,
but some may suit your needs more than others.

Some other links you could look at are:

http://www.vpnlabs.org/vpn-categories/VPN/4/index.html
http://www.checkpoint.com/press/2002/wirelesslan042202.html
http://www.80211-planet.com/news/article/0,,1481_965341,00.html

No problem.

Dazz

>Chris
>
>

Windows XP is the "colouring in book" of Operating Systems.
It's colourful, but completely lacking in substance.

Dazz - 2002

Relevant Pages

  • RE: RE: Telnet/SSL v SSH
    ... SSH is a secure login and shell ... SSH and SSL are apples and oranges. ... include secure use of networked applications, remote system administration, ...
    (Security-Basics)
  • Re: How secure is SSH ?
    ... I've heard excellent things about SSH, ... Hmmmm, how secure is anything? ... To quote from the SSL Faq: ... Windows XP is the "colouring in book" of Operating Systems. ...
    (comp.security.firewalls)
  • Re: [Full-disclosure] Why Vulnerability Databases cant do everything
    ... best to relegate programming to a ... is a big difference between these two views of information security. ... but not nearly as important as designing secure systems. ... My favorite example to illustrate this point - ssh. ...
    (Bugtraq)
  • RE: HOW: SSL/SSH connection ??
    ... SSH uses SSL to secure/encrypt data. ... There is no quick and easy way to programmatically implement secure ... communication in Windows. ...
    (microsoft.public.dotnet.languages.vc)
  • Re: Relationship SSH <-> VPN ??
    ... I'm not sure whether you're most probably referring to *SSL* vs. VPN, ... and not SSH. ... A Virtual Private Network, VPN, is a secure "network" built on top of ...
    (comp.security.misc)