On Fri, 2004-10-29 at 15:44 -0300, Andreas wrote:
> On Fri, Oct 29, 2004 at 02:25:36PM -0400, Kevin wrote:
> > BTW Andreas, you wrote that:
> > > but those were minor. The important thing is that it worked and
> > > the communication was even encrypted (not just the password).
> >
> > May I ask, how did you determine this with certainty? I've been trying
> > to convince myself that this connection is encrypted also, but I don't
> > see anything definitive in my server logs.
>
> Check the SSF (security strength factor) value. It should be 128 for
> DIGEST-MD5. You may
> also just tcpdump the traffic.
>
>
Isn't the SSF addressing only the issue of the credentials (as opposed
to the content)? I see the same SSF when I use non-encrypted
connections. I've tried using tcpdump, but I don't have enough
experience with it yet to make a clear determination. Just thought I'd
see how you were coming to that conclusion.
--
Kevin
http://www.gnosys.us
-------------------------------------------------------
This SF.Net email is sponsored by:
Sybase ASE Linux Express Edition - download now for FREE
LinuxWorld Reader's Choice Award Winner for best database on Linux.
http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click
|