Subject: Re: FreSSH
To: NetBSD-current Discussion List <current-users@netbsd.org>
From: Eric Haszlakiewicz <erh@nimenees.com>
List: current-users
Date: 03/09/2002 19:04:56
On Sat, Mar 09, 2002 at 07:20:34PM -0500, Greg A. Woods wrote:
> If you're going to use something like SSH for authentication and
> authorisation then you need to use strong crypto on the data channels
> too, as otherwise you may as well just use anonymous logins because they
> would actually be more secure (no threat of theft of identity!).
	no you don't.  You're missing the fact that ssh (v2 at least) can include a
mac (message authentication code) on every packet to prevent the transmitted
data from being modified w/o needing to encrypt all of it.

eric