Re: Newbie question

[Eric Strovink <strovink@xxxxxxx>]

Scott Klement wrote:

> All telnet clients are insecure.

On the contrary, someone wrote me privately that there is a new AS/400 telnet
server that uses SSL.  Plus, the same person indicated that there is already
encrypted password authentication built into the (newest - 1) version of the
AS/400 telnet server.  You can read some RFC's that propose that authentication
(links on the tn5250 developer site).  Obviously things have progressed beyond
the proposal stage.

> I think I see a flaw in that logic...

Sorry that you misunderstood.  Clearly the encrypted link I was talking about is
the one between the Linux proxy and the the java client.  As you say, what would
be the point of encrypting a connection between a local proxy machine and the
AS/400?

Based on the new telnet server information above, it may be possible to encrypt
all the way through the proxy to the new telnet server.  But, for those AS/400
sites that have not upgraded, an encrypting proxy server would still be useful.


+---
| This is the LINUX5250 Mailing List!
| To submit a new message, send your mail to LINUX5250@midrange.com.
| To subscribe to this list send email to LINUX5250-SUB@midrange.com.
| To unsubscribe from this list send email to LINUX5250-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---