From owner-freebsd-security Fri Nov 24 14:21:30 1995 Return-Path: owner-security Received: (from root@localhost) by freefall.freebsd.org (8.6.12/8.6.6) id OAA26735 for security-outgoing; Fri, 24 Nov 1995 14:21:30 -0800 Received: from multivac.orthanc.com (root@multivac.orthanc.com [204.244.20.2]) by freefall.freebsd.org (8.6.12/8.6.6) with ESMTP id OAA26724 for ; Fri, 24 Nov 1995 14:21:20 -0800 Received: from localhost (lyndon@localhost) by multivac.orthanc.com (8.7/8.7) with SMTP id OAA28830; Fri, 24 Nov 1995 14:20:49 -0800 (PST) Message-Id: <199511242220.OAA28830@multivac.orthanc.com> X-Authentication-Warning: multivac.orthanc.com: Host lyndon@localhost didn't use HELO protocol From: Lyndon Nerenberg (VE7TCP) To: Bill Trost cc: security@freebsd.org Subject: Re: I wonder how much trouble something like this would be to do? :) In-reply-to: Your message of "Fri, 24 Nov 1995 13:12:35 PST." Date: Fri, 24 Nov 1995 14:20:47 -0800 Sender: owner-security@freebsd.org Precedence: bulk >>>>> "Bill" == Bill Trost writes: Bill> Lyndon Nerenberg writes: No doubt. I first read about this Bill> several (at least three) years ago in one of the Usenix Bill> Security Conference proceedings. The paper described an Bill> implementation that had been done for 4.4BSD. I can try to Bill> dig out a reference if anyone's interested. Bill> That's me. I took a look through my collection of Usenix proceedings. The paper did not jump out at me. Considering the number of volumes that have gone missing from my collection over the years, this is not surprising. I did a search through the index at usenix.org but nothing obvious turned up, although the following reference looks promising: Author: John Ioannidis Author: Matt Blaze Title: The Architecture and Implementation of Network Layer Security in UNIX Pages: 29-39 Publisher: USENIX Proceedings: UNIX Security IV Symposium Date: October 4-6, 1993 Location: Santa Clara, CA Institution: Columbia University Institution: AT&T Bell Laboritories It's close to the timeframe I remember reading the paper (fall 1991 to fall 1993). While searching the Usenix index I noticed a couple of papers from the Usenix Security V conference that looked promising. In particular: Author: Pau-Chen Cheng Author: Juan A. Garay Author: Amir Herzberg Author: Hugo Krawczyk Title: Design and Implementation of Modular Key Management Protocol and IP Secure Tunnel on AIX Pages: 41-54 Publisher: USENIX Proceedings: 5th USENIX UNIX Security Symposium Date: June 5-7, 1995 Location: Salt Lake City, UT Institution: IBM, Thomas J. Watson Research Center Anyway, I'll keep digging and let you know what turns up. If you decide to search your own collection, I vaguely remember a paper about forwarding FIDOnet articles over the Internet being in the same proceedings. (Don't ask me why ...) --lyndon