Download Firefox: WindowsMac OS X
logo       
Google Custom Search
    AddThis Social Bookmark Button

Re: Re: SASL GSSAPI success stories?: msg#00009

Subject: Re: Re: SASL GSSAPI success stories?
On Fri, 2004-10-29 at 15:44 -0300, Andreas wrote:
> On Fri, Oct 29, 2004 at 02:25:36PM -0400, Kevin wrote:
> > BTW Andreas, you wrote that:
> >  > but those were minor. The important thing is that it worked and
> >  > the communication was even encrypted (not just the password).
> > 
> > May I ask, how did you determine this with certainty?  I've been trying
> > to convince myself that this connection is encrypted also, but I don't
> > see anything definitive in my server logs.
> 
> Check the SSF (security strength factor) value. It should be 128 for 
> DIGEST-MD5. You may
> also just tcpdump the traffic.
> 
> 

Isn't the SSF addressing only the issue of the credentials (as opposed
to the content)?  I see the same SSF when I use non-encrypted
connections.  I've tried using tcpdump, but I don't have enough
experience with it yet to make a clear determination.  Just thought I'd
see how you were coming to that conclusion.

-- 
Kevin
http://www.gnosys.us



-------------------------------------------------------
This SF.Net email is sponsored by:
Sybase ASE Linux Express Edition - download now for FREE
LinuxWorld Reader's Choice Award Winner for best database on Linux.
http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click


<Prev in Thread] Current Thread [Next in Thread>