Re: How do I turn off encryption in ssh
From: Richard E. Silverman (res_at_qoxp.net)
Date: 06/07/04
- Next message: Richard E. Silverman: "Re: SSH as a VPN Client?"
- Previous message: Simon Tatham: "Re: SSH as a VPN Client?"
- In reply to: Mohit Aron: "Re: How do I turn off encryption in ssh"
- Next in thread: Mohit Aron: "Re: How do I turn off encryption in ssh"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: 07 Jun 2004 09:34:01 -0400
>>>>> "MA" == Mohit Aron <aron@cs.rice.edu> writes:
MA> In addition, one might want to use ssh just to compress the
MA> data. The way I'm using it, I don't need encryption (since I have
MA> VPN) but I do care about compression as I'm using it over a slow
MA> Internet connection.
While I don't agree with Bill's comments, neither do I consider this is a
good reason to want to turn off encryption. One might need to do so
because of legal concerns, or auditing requirements, etc. But I think
doing so out of some notion of elegance ("I don't want to encrypt twice")
is misguided.
MA> I hope the openssh maintainers haven't removed the facility to
MA> turn off encryption from ssh.
Including it has security consequences which must be considered. If the
null cipher is there, it can be turned on accidentally or maliciously.
Since the presence or absence of encryption is invisible to most users,
security could be badly compromised without any way for the user to know.
-- Richard Silverman res@qoxp.net
- Next message: Richard E. Silverman: "Re: SSH as a VPN Client?"
- Previous message: Simon Tatham: "Re: SSH as a VPN Client?"
- In reply to: Mohit Aron: "Re: How do I turn off encryption in ssh"
- Next in thread: Mohit Aron: "Re: How do I turn off encryption in ssh"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
