From owner-freebsd-security Fri Sep 22 13: 7:31 2000 Delivered-To: freebsd-security@freebsd.org Received: from rover.village.org (rover.village.org [204.144.255.49]) by hub.freebsd.org (Postfix) with ESMTP id B181237B424 for ; Fri, 22 Sep 2000 13:07:26 -0700 (PDT) Received: from harmony.village.org (harmony.village.org [10.0.0.6]) by rover.village.org (8.9.3/8.9.3) with ESMTP id OAA11466; Fri, 22 Sep 2000 14:07:24 -0600 (MDT) (envelope-from imp@harmony.village.org) Received: from harmony.village.org (localhost.village.org [127.0.0.1]) by harmony.village.org (8.9.3/8.8.3) with ESMTP id OAA70947; Fri, 22 Sep 2000 14:07:23 -0600 (MDT) Message-Id: <200009222007.OAA70947@harmony.village.org> To: Lyndon Nerenberg Subject: Re: sysinstall DOESN'T ASK, dangerous defaults! (Was: Re: wats so special about freeBSD?) Cc: Brett Glass , Dave McKay , Wes Peters , nbm@mithrandr.moria.org, security@FreeBSD.ORG In-reply-to: Your message of "Fri, 22 Sep 2000 12:49:28 MDT." <200009221849.e8MInS116911@orthanc.ab.ca> References: <200009221849.e8MInS116911@orthanc.ab.ca> Date: Fri, 22 Sep 2000 14:07:23 -0600 From: Warner Losh Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org In message <200009221849.e8MInS116911@orthanc.ab.ca> Lyndon Nerenberg writes: : RFC2289: A One-Time Password System I think that FreeBSD supports this as well. Ftp also now supports secure passowrd exchange, although I've never set it up. Unencrypted telnet is dangerous, but there are enough interesting things going on that telnet itself isn't too bad if you can use the security enhancing parts in your environment. Warner To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message