Re: [FW1] FTP: Passwort in cleartext!

[Micha Borrmann <micha@FW1-NOSPAMtli.de>]

On Fri, 2 Mar 2001, Thomas Borger wrote:

> I have traced a connection from a client which would establish a
> ftp-connection to an intern FTP-Server over Firewall 1 with Ethercap and
> have been terrified.
> The accountname and corresponding passwords was transmitted in cleartext!

that is ftp! It's the same with a lot of other protocols, f.e. telnet and
pop3

> Is there a alternative to transmitt this data not in cleartext?

Don't use ftp. Try scp. Or use a webinterface for the ftp Server and use
SSL for the webinterface.

Bye,
Micha

-- 
see MB6408-RIPE (http://www.ripe.net/cgi-bin/whois?MB6408-RIPE)
for detail contact information



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================