Re: Secure Telnet

Lance Julander ( (no email) )
Thu, 27 Aug 98 12:32:28 PDT

In reply to 27 Aug message from ntisp@iea-software.com:

>Does anyone use a secure telnet server?
>Something offering encryption between client
>and server? I need to provide a secure access
>to some proprietary UNIX based apps, but do not
>want login & data sent as cleartext.

Could you use ssh? Ssh is intended as a complete replacement for
rlogin, rsh, rcp, and rdist. It can also replace telnet in many cases.

Try:

http://www.ssh.org/

for more info.

-Lance

P.S. I've copied a little text from the SSH info page below.

Ssh (Secure Shell) is a program to log into another computer over
a network, to execute commands in a remote machine, and to move
files from one machine to another. It provides strong
authentication and secure communications over insecure channels.
Its features include the following:

•Strong authentication. Closes several security holes (e.g., IP,
routing, DNS spoofing, and listening for passwords from the
network). New authentication methods: .rhosts together with RSA
based host authentication, and pure RSA authentication.

•All communications are automatically and transparently
encrypted. Encryption is also used to protect against spoofed
packets and hijacked connections.

•X11 connection forwarding provides secure X11 sessions.

•Arbitrary TCP/IP ports can be redirected over the encrypted
channel in both directions.

•Client RSA-authenticates the server machine in the beginning of
every connection to prevent trojan horses (by routing or DNS
spoofing) and man-in-the-middle attacks. The server
RSA-authenticates the client machine before accepting .rhosts or
/etc/hosts.equiv authentication (to prevent DNS, routing, or IP
spoofing).

•An authentication agent, running in the user's local workstation
or laptop, can be used to hold the user's RSA authentication keys.

•Multiple convenience features fix annoying problems with rlogin
and rsh.

--------------------------
Lance Julander
Terragon Media
lance at terragon.com