AuthHosts, &, WinVNC authentication

[Tim Waugh]

On Wed, Jan 17, 2001 at 12:24:48AM -0500, Jerry Coker wrote:

> Does WinVNC pass the pw in the clear!?  The authentication method used
> by WinVNC client/server is fuzzy to me after reading
> http://www.uk.research.att.com/vnc/sshvnc.html.  I get the impression that
> the pw may be passed as plain text over the wire, thus, ssh tunnelling
> would be, IMHO, necessary.  TIA.

It's not in the clear, no; it's some kind of DES challenge/response I
think.  But it's a good idea to use ssh tunnels anyway, as everything
else is in the clear.

Tim.
*/

[demime 0.97b removed an attachment of type application/pgp-signature]
---------------------------------------------------------------------
To unsubscribe, send a message with the line: unsubscribe vnc-list
to majordomo "at" uk.research.att.com
See also: http://www.uk.research.att.com/vnc/intouch.html
---------------------------------------------------------------------