Re: Remote TCP/IP connection using TN5250 or browser JAVA applet

on 12/08/97at 06:24 AM, the Great and Grand  Wazir kliss@writme.com said:


>Is there any way around sending your AS/400 userid and password over the
>internet in the clear? How often do you change passwords? What level of
>security are you running?

The risk, in my mind, isn't the sniffing of the backbone or the phone
lines.  The risk is the salesman that scotchtapes his little instruction
sheet including login and password, to the inside of his laptop case.  
Or, the salesman that brags about the new technology to his customers and
lunch buddies, including full demos.  Or the disgruntled and angry
employee that is spreading the word before he quits, or even the
well-intentioned employee that shares info with a valued customer so the
customer can access "his" data directly.  

The other part of course, is "what can a ne'er-do-well steal, screw-up?" 
Highly sensitive information probably should be separately secured,
anyway. Sales information doesn't need high security  -  will it really
upset you if someone steals your sales literature.?

----------------------------------------------------
Booth Martin     
---------------------------------------------------



+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to "MIDRANGE-L@midrange.com".
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---