Re: [CentOS] Another security question

2008-12-25 Thread Robert Moskowitz
Lanny Marcus wrote: > On Thu, Dec 25, 2008 at 9:49 AM, Robert Moskowitz > wrote: > >> Lanny Marcus wrote: >> "as much encryption as is possible" Just strikes me all wrong. >> >> "Use the RIGHT amount of intelligence." >> > > I agree with you, 100%. Not well written. The goal, obviously, i

Re: [CentOS] Another security question

2008-12-25 Thread Brian
On Dec 25, 2008, at 5:43 PM, Lanny Marcus wrote: > On Thu, Dec 25, 2008 at 9:49 AM, Robert Moskowitz consult.com> wrote: >> Lanny Marcus wrote: >> "as much encryption as is possible" Just strikes me all wrong. >> >> "Use the RIGHT amount of intelligence." > > I agree with you, 100%. Not well wri

Re: [CentOS] Another security question

2008-12-25 Thread Lanny Marcus
On Thu, Dec 25, 2008 at 9:49 AM, Robert Moskowitz wrote: > Lanny Marcus wrote: > "as much encryption as is possible" Just strikes me all wrong. > > "Use the RIGHT amount of intelligence." I agree with you, 100%. Not well written. The goal, obviously, is to be as safe as possible. If she is going

Re: [CentOS] Another security question

2008-12-25 Thread Robert Moskowitz
Lanny Marcus wrote: > On Wed, Dec 24, 2008 at 9:46 AM, Anne Wilson > wrote: > >> I would like to be able to check my bank account while we are on holiday. I >> know the bank's site is encrypted from the start - the login page is https >> and >> Verisign-trust encrypted - but is there any ris

Re: [CentOS] Another security question

2008-12-24 Thread Lanny Marcus
On Wed, Dec 24, 2008 at 9:46 AM, Anne Wilson wrote: > I would like to be able to check my bank account while we are on holiday. I > know the bank's site is encrypted from the start - the login page is https and > Verisign-trust encrypted - but is there any risk in using public wireless > networks

Re: [CentOS] Another security question

2008-12-24 Thread Anne Wilson
On Wednesday 24 December 2008 17:06:48 Les Mikesell wrote: > Anne Wilson wrote: > >> Typically SSL secured sites will at least keep your login credentials > >> safe. However, someone can still see where you're going by sniffing your > >> traffic. > > > > That's not too much of a concern, if they ca

Re: [CentOS] Another security question

2008-12-24 Thread Anne Wilson
On Wednesday 24 December 2008 16:30:58 Robert Moskowitz wrote: > Anne Wilson wrote: > > I would like to be able to check my bank account while we are on holiday. > > I know the bank's site is encrypted from the start - the login page is > > https and Verisign-trust encrypted - but is there any ris

Re: [CentOS] Another security question

2008-12-24 Thread Les Mikesell
Anne Wilson wrote: > >> Typically SSL secured sites will at least keep your login credentials safe. >> However, someone can still see where you're going by sniffing your traffic. >> > That's not too much of a concern, if they can't read the actual packets. > >> If you're very concerned, setup an

Re: [CentOS] Another security question

2008-12-24 Thread Robert Moskowitz
Anne Wilson wrote: > I would like to be able to check my bank account while we are on holiday. I > know the bank's site is encrypted from the start - the login page is https > and > Verisign-trust encrypted - but is there any risk in using public wireless > networks for jobs like this? It sou

Re: [CentOS] Another security question

2008-12-24 Thread Anne Wilson
On Wednesday 24 December 2008 14:54:00 Tim Nelson wrote: > Typically SSL secured sites will at least keep your login credentials safe. > However, someone can still see where you're going by sniffing your traffic. > That's not too much of a concern, if they can't read the actual packets. > If you'r

Re: [CentOS] Another security question

2008-12-24 Thread Tim Nelson
Typically SSL secured sites will at least keep your login credentials safe. However, someone can still see where you're going by sniffing your traffic. If you're very concerned, setup an OpenVPN tunnel that routes all of your traffic through it. Then, the only thing they'll see from the start is

[CentOS] Another security question

2008-12-24 Thread Anne Wilson
I would like to be able to check my bank account while we are on holiday. I know the bank's site is encrypted from the start - the login page is https and Verisign-trust encrypted - but is there any risk in using public wireless networks for jobs like this? It sounds secure enough, but maybe I