Not Quite [WAS] Re: Very scary!

[Prabhu Ramachandran <prabhu@xxxxxxxxxxxxxxxxxx>]

hi,

>>>>> "Ravi" == Ravi  <ravi@xxxxxxxxxxx> writes:

<snip>
    Ravi> 		In short, its a media hype, and you can't
    Ravi> fight clueless users/admins using a tool like ssh and then
    Ravi> shove the blame onto ssh. OpenBSD rules, when it comes to
    Ravi> security! :>

Well, thanks for the info, but it still reminds us that the
man-in-the-middle attacks are possible with smart enough crackers.  I
thought all public key systems are liable to such attacks.  IIRC even
IPSec is liable to man-in-the-middle attacks.  Any ideas on how
easy/difficult it is to do this kind of stuff??  Or is there some kind
of manual key exchange that is necessary - like PGP key signing etc.??

prabhu
---
Visit our home page at: www.chennailug.org
Send e-mail to 'ilugc-request@xxxxxxxxxxxxxxxxxx' with 'unsubscribe' 
in either the subject or the body to unsubscribe from this list.