8 ms·
I find this hard to believe. I can certainly believe that American crypto laws resulted in a lot of unencrypted protocols, but there’s more to security than jus
by mikeash 9y ago
I find this hard to believe. I can certainly believe that American crypto laws resulted in a lot of unencrypted protocols, but there’s more to security than just crypto. What about things like rlogin? A lot of older stuff (and newer stuff, for that matter) assumes that the other side is trustworthy, which is a separate concern from encryption.
- testvox 9y agoWhat about rlogin? Isn't the major security vulnerability with it the lack of encryption?
- mikeash 9y agoOne of rlogin's authentication methods is to have a list of hosts and usernames that are allowed to log in. If you're on the list, you're in. How does it know you're actually using that username? Well, it asks your host, which would definitely never lie.