4 ms·
Your messages are cleartext, can be forged, and your password can be trivially grabbed across just a few logins. It's like pre-https internet basically. This
by vorpalhex 3y ago
Your messages are cleartext, can be forged, and your password can be trivially grabbed across just a few logins.
It's like pre-https internet basically.
This also means winlink shouldn't be used for PII (which is sort of important in an emergency!).
If you can at least key exchange and encrypt between you and the next node, you have some safeguards and your messages aren't in the clear - but that is currently prohibited by the regs.
- skullone 3y agoI don't think scammers will be listening in on shortwave to grab names or an address during an emergency :p
- baz00 3y agoHave you been to a hamfest recently? Do you want half the participants getting your details?
- piperswe 3y agoIf you put your address on your license application, then they have your details if they have your callsign.
- vorpalhex 3y agoSecurity through obscurity is no security at all. SDRs that will record everything across a nice swath of frequency are $20.
- Forgotthepass8 3y ago+those fantastic websdr sites will have it captured
- kwk1 3y ago> Your messages are cleartext, can be forged Digital signatures are permissible under the current rules and in principle avoid this issue although the software tooling around it isn't there. Similar example: Debian packages are transmitted over HTTP, but this isn't a problem because they are authenticated with GPG.