Re: How safe is SU?

["Chris K. Young" <cky@pobox.com>]

Quoted from A farmer using BSD, eh!:
> - is SU process encrypted?

Not of itself. You can run it under SSH though.

> - Can SU password be intercepted in LAN, even if SU process is
> encrypted?

Yes.

> - related: Is root login still unsafe by any chance?

Yes.

If ``interception'' is your only worry, you can consider using
one-time passwords (the OpenBSD FAQ has a chapter on this).

If, on the other hand, you're also paranoid about session takeovers,
then you'd better use SSH or the like.

	---Chris K.
-- 
 Chris, the Young One |_ but what's a dropped message between friends? 
  Auckland, New Zealand |_ this is UDP, not TCP after all ;) ---John H. 
http://cloud9.hedgee.com/ |_ Robinson, IV