Re: Securing ssh tunnels.

[ On Thursday, June 26, 2003 at 18:17:01 (-0700), Roy S. Rapoport wrote: ]
> Subject: Re: Securing ssh tunnels.
>
> It's a strange way to look at things, but it's actually quite valid, and in

People who don't understand covert channels should not ever try to do any kind of data communications in any public environment whatsoever.

If some security officer at some financial institution doesn't understand the ubiquity and the implications of covert channels then they should be fired immediately. Really.

SSH is the very least of anyone's worries when it comes to covert channels.

> But with SSH/HTTPS, you're screwed -- there's no way to figure out what
> the user is sending out. It is, from your point of view, less secure, much
> like the government feels it's less secure for everybody to have cyphers
> the NSA can't crack.

If you can't control your data flow without trying to prevent covert channels then: (a) You've lost before you started; and (b) Your backend security is completely worthless.

-- 
								Greg A. Woods

+1 416 218-0098;            ;           
Planix, Inc. ; VE3TCP; Secrets of the Weird