[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: rlogind and rexecd go away? [CVS: cvs.openbsd.org: src]



On Fri, May 10, 2002 at 12:52:59AM +1200, Jamie Walker wrote:
| On Thu, May 09, 2002 at 02:40:43PM +0200, Dimitry Andric wrote:
| > A very wise decision! But shouldn't telnet and ftp be eradicated too,
| > according to this redenation? :)
| 
| There are way too many legitimate uses of telnet. Including many where
| security isn't an issue.

But then the telnet _server_ would be up for removal, as this has no
legitimate uses (that I know of) that SSH doesn't provide.

| Before being happy about ftp going, I'd like to see two things: a friendlier
| command-line SFTP client (read: tab completion), and an official way of
| chrooting SFTP on the server end. There is an unofficial patch to sftp-server
| floating around, but I'd feel much safer with something from the OpenSSH guys.

I'd also appreciate an option where the authentication is encrypted,
but the data isn't (compare ftp-cmd (21) is crypted, but ftp-data (20)
is not). This would definitely reduce load on some heavily used sftp
servers, where I would otherwise need more iron to saturate my b/w.

Paul 'WEiRD' de Weerd

-- 
>++++++++[<++++++++++>-]<+++++++.>+++[<------>-]<.>+++[<+
+++++++++++>-]<.>++[<------------>-]<+.--------------.[-]
                 http://www.weirdnet.nl/