Hi Mike and everyone,

CHAP is a weak authentication method, and all traffic is sent
unencrypted (unless using IPSec).

Do people use CHAP? Or does its weakness not matter because it's just
used to ensure the wrong initiator doesn't accidentally connect to a target?

Does anyone use IPSec?

In the absence of IPSec should we at least be advocating full-volume
encryption on luns?

Thanks -- Andy

-- 
You received this message because you are subscribed to the Google Groups 
"open-iscsi" group.
To post to this group, send email to open-iscsi@googlegroups.com.
To unsubscribe from this group, send email to 
open-iscsi+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/open-iscsi?hl=en.

Reply via email to