El jue, 06 abr 2000, escribiste:

> > > If you change it to DISPLAY=localhost:0.0 then you can
> > > run your X apps with no problem.
> > 
> >     Yes, but then X apps are not encrypted and, if you introduce some
> > password in one of them (in netscape to receive e-mail for example), that
> > password can be easily stollen.
> 
> Uh what? ssh is encrypting the session. That's what X11 forwarding is for.

        From the ssh man: 

     If the user is using X11 (the DISPLAY environment variable is set), the
     connection to the X11 display is automatically forwarded to the remote
     side in such a way that any X11 programs started from the shell (or com­
     mand) will go through the encrypted channel, and the connection to the
     real X server will be made from the local machine.  The user should not
     manually set DISPLAY. Forwarding of X11 connections can be configured on
     the command line or in configuration files.
 
     The DISPLAY value set by ssh will point to the server machine, but with a
     display number greater than zero.  This is normal, and happens because
     ssh creates a ``proxy'' X server on the server machine for forwarding the
     connections over the encrypted channel.

        If DISPLAY=somehost:0.0 then X apps are NOT forwarding through ssh.

Reply via email to