News for hackers. Stuff that matters.

A comment on Critical crypto bug leaves Linux, hundreds of apps open to eavesdropping. Parent comment

Re: Critical crypto bug leaves Linux, hundreds of apps open ... by einhverfr on Tuesday March 04, 2014 @10:10PM (#7345012)
> who even knew that telnet had encryption?

I did. Most of the ftp, telnet, rsh, etc. utilities shipped with BSD and Linux had Kerberos and encryption support. I also suspect that these had at least wider use in larger environments than many people knew, because before OpenSSH had Kerberos support, you could integrate encryption and authentication in useful ways.

[ Parent | on HN ]
Re: Critical crypto bug leaves Linux, hundreds of apps open ... by cperciva on Wednesday March 05, 2014 @04:51AM (#7346185)
Oh, I'm not talking about the Kerberized telnet. I'm talking vanilla BSD telnet.
[ Parent | on HN ]
Re: Critical crypto bug leaves Linux, hundreds of apps open ... by einhverfr on Wednesday March 05, 2014 @07:11PM (#7350924)
But even there I think you are talking about "oh you can do that with kerberos which not everyone has so let's add it for other environments too."

The problem with encrypted telnet has always been handling of cases where encryption isn't supported.

[ Parent | on HN ]