Re: SSL certificates
On Monday 20 September 2004 05:57 pm, Russ Allbery wrote:
> While I mostly agree with you, I'll mention that as a university
> systems administrator, we still do regularly have people try to break
> into one cluster system and install a traffic sniffer to capture
> cleartext passwords. On a switched network, of course, this is
> functionally equivalent to trojaning the login daemons, since all you
> get is traffic to that particular host, but it's actually a lot
> easier to install and keep hidden a traffic sniffer than it is to
> trojan the login daemons.
Switches don't necessarily limit sniff space:
http://www.securesphere.net/download/papers/SwitchSniff.htm
--
Rob
Reply to: