From: Robert Dober <robert.dober@...>
Date: 2006-08-20T18:06:41+09:00
Subject: Re: Secure telnet and ftp?

------=_Part_25224_28912966.1156064800021
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

On 8/19/06, James Edward Gray II <james@grayproductions.net> wrote:
>
> On Aug 18, 2006, at 7:02 PM, Hal Fulton wrote:
>
> > You don't need to mess with public keys and such?
>
> Hmm, I do have my keys set correctly with that server, but I wouldn't
> think you need it with the password.  The key is just a tool for
> skipping password validation, right?
>
> James Edward Gray II
>
> Sorry if I might post in on the wrong spot, because I wanted to talk abou=
t
ssh setup in general.
Hal if you have the luxury to be in a DMZ (and you might be as you wanted t=
o
use unsecure tools) you can defenitely afford to setup keys without
passphrases and than ssh behaves as rsh and sftp (almost) like ftp. (use
Edward's tools anyway :)
You could also automate tunnelling, although really we work a lot with
tunnels, passing half pipe openVPN without SSL through them

I am talking Linux and open-ssh of course ;)

* Works like charm
* Amazingly powerfull and stable
- Not very easy to understand at first (needed two or three tutorials to ge=
t
it)
- A pain to tear down. (a security issue )

Ok this is getting long, I guess one has to get into ssh a little bit to
really evaluate all possible use cases.
Feel free to ask for help on ssh off list I will be glad to reply.
I *should* give some links to great ssh tutorials here I know, I'll try to
find the time to send them offlist.

Cheers
Robert



--=20
Deux choses sont infinies : l'univers et la b=EAtise humaine ; en ce qui
concerne l'univers, je n'en ai pas acquis la certitude absolue.

- Albert Einstein

------=_Part_25224_28912966.1156064800021--