Windows Authentication/Passwords

malcolmlashley@lucent.com malcolmlashley "at" lucent.com
Thu, 06 Aug 1998 15:38:56 +0000


I have been thinking it would be a good idea to add SSL to vnc. I did some 
digging and found some useful info at netscape.com and mozilla.org. Netscape 
provide a reference SSL 3.0 source code called SSL Ref 3.0 - in ANSI C, which 
should be quite simple to leverage into the main environments vnc is supported 
in (Windows and unix versions of the reference source are available!)

The only trouble is that  the US government export restrictions, classify it as 
a munition and thus you are in the same league as someone who traffics nuclear 
war-heads if you download it outside the states. I don't want to risk that from 
my company account - I quite like my job!

If anyone has downloaded the SSL Ref3.0 source and would like to send me a copy 
that would be fine - I'll take a look and see if I think I can use it.

It's free for non-commercial use - so there shouldn't be any licensing issues.

I've taken a look at the Internet Draft for the SSL 3 spec - and I don't fancy 
coding it up from scratch!

If anyone happens to have the corresponding source code from netscape/ apache 
httpd - I guess that would be a good starting point.

Cheers,

malc.


> From admin "at" intergrafix.net Thu Aug  6 15:25:49 1998
> 
> > 
> > :)  True.  VNC is only slightly more secure than Telnet.  I think the
> > reasoning behind not adding encryption of keypresses at the moment is that
> > we should wait until we have a decent way of doing it, rather than trying
> > to kludge something together to tide things over.
> > 
> 
> i've been reading this list mostly, no postings until now. Isn't there a
> way to do an SSL type security? like, at the console, use the
> vncserver to generate a keyfile. for implmentation of the client side of
> it maybe checking out the netscape browser source would help *shrug*
> 
> -Cygnus
> .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> Anthony J. Biacco                           Network Administrator/Engineer
> admin "at" intergrafix.net                        Intergrafix Internet Services
> 
>           "The best way to predict the future, is to invent it."
> http://cygnus.ncohafmuta.com                    http://www.intergrafix.net
> .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._..-._.-.
> 
> 
> ---------------------------------------------------------------------
> The VNC mailing list     -   see http://www.orl.co.uk/vnc/intouch.html
> ---------------------------------------------------------------------
> 

---------------------------------------------------------------------
The VNC mailing list     -   see http://www.orl.co.uk/vnc/intouch.html
---------------------------------------------------------------------