[ale] Re: earthlink

[Wandered Inn]

John Mills wrote:
> 
> On Thu, 11 Jan 2001, Wandered Inn wrote:
> 
> > I'm not an earthlink user, but I did visit their web site a couple of
> > times to check out their services.  It requires SSL v2, which is
> > considered no longer secure, note urls below for further info.
> 
> What would this correspond to for OpenSSL users? Does it apply to services
> like 'sshd', or only web services?

It was my understanding that openssl supported both v2 and v3.  Since
sshd uses OpenSSL, I'd suspect there could be security issues, but I'm
not a security expert. I would also say that sshd with v2 is better than
clear text id/passwords.

> 
> > Eric Murray web site, SO of the well published Laura Lemay.
> > http://www.lne.com/ericm/papers/ssl_servers.html
> 
> I tried Eric's test on an 'sshd' service and it didn't find anything
> there (port 22 in this case). That port should only offer a
> console-session login. Any idea what I should have expected?

I don't really know, it may be that his test is designed strickly for
https?


> 
> Thanks for any comments.
>  - John Mills

--
Until later: Geoffrey		esoteric at denali.atlnet.com

"Great spirits have always found violent opposition from mediocre minds.
The
latter cannot understand it when a man does not thoughtlessly submit to
hereditary prejudices but honestly and courageously uses his
intelligence."
- Albert Einstein
--
To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in message body.