[KLUG Members] Re: Best security replacements for telnet & ftp

Bryan J. Smith members@kalamazoolinux.org
27 Jan 2002 15:40:20 -0500


On Sun, 2002-01-27 at 14:17, Mike Slack wrote:
> Secure shell (ssh) and Secure FTP (sftp).

Agreed.

You'll also get good performance with the Blowfish cipher ("-c
blowfish") rather than the default of DES.  Most feel Blowfish is as
secure (or more secure) than DES, especially with a longer key size
option.  BSD-licensed OpenSSH (http://www.openssh.com, yes ".com", long
story) is available for a variety of platforms and usually comes with
most Linux and BSD distros.

In addition to the OpenSSH CLI under [largely] GPL-licensed Cygwin
(http://www.cygwin.com), there are several GUIs available for Windows
users that support ssh, scp (ssh's copy) and/or sftp (ssh' ftp).

Be sure they all use the version 2 protocol.  Version 1 has some
issues.  Since OpenSSH is BSD-licensed, there are no issues with
commercial software using its source.

-- Bryan

-- 
Bryan J. Smith, Engineer        mailto:b.j.smith@ieee.org
AbsoluteValue Systems, Inc.     http://www.linux-wlan.org
SmithConcepts, Inc.          http://www.SmithConcepts.com
---------------------------------------------------------
1999 IRS Data:  The top 1% of income earners pay over 36%
of the taxes, but have less than 20% of the total income.