In the last episode (Jul 15), Tommy Svensson said:
> > why does it not "seem secure enough"?
> 
> I've read that the passwords are passed as _plaintext_ over the net. 

You might want to read the ssh manpage, which is as close to the final
authority as you're likely to get:

   SSH protocol version 1

     If other authentication methods fail, ssh prompts the user for a
     password.  The password is sent to the remote host for checking;
     however, since all communications are encrypted, the password
     cannot be seen by someone listening on the network.

   SSH protocol version 2

     If public key authentication fails or is not available a password
     can be sent encrypted to the remote host for proving the user's
     identity.

-- 
        Dan Nelson
        [EMAIL PROTECTED]

Reply via email to