× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.


  1.  Home
  2. MIDRANGE-L
  3. October 2008

Re: Telnet concerns from auditors

On Fri, Oct 3, 2008 at 6:36 PM, davidson_l <DAVIDSON_L@xxxxxxxxxxxxxxxx> wrote:
I think this must have been a "Hot Topic" at one of
the recent national auditor get-togethers-- we recently
got hit with this. One of the auditors actually said he
wanted to recommend that we "turn off the telnet
server"... not sure exactly how he expected we would have
folks connect if that took place, but he did modify his
position enough to say "only use secure protocols".

telnet has been completely deprecated by ssh in Unix environments,
which is where this probably comes from. SSH is vastly superior to
telnet for hundreds of reason, but the security enhancement given be
SSH over telnet can be fixed by using telnet-ssl.

And not using telnet-ssl if you're more than 10 people in the company
is a very, very bad idea. Even though CA alleviates some of the
issues, a session can still be hijacked easily because it is not
secured using strong encryption.



As an Amazon Associate we earn from qualifying purchases.

This thread ...
Follow-Ups:
Replies:
Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.