Re: Plain text shared secrets problematic?

Heilz wrote:

Thanks for the quick answer.

Yes, the RADIUS secret was what I meant. Since we want to use a freeRADIUS proxy in our DMZ and because a secure connection from our customers to our application is important, that seems to be a problem. Are there maybe some best practices for a case like that, or isn't the plain-text secret such an issue after all?

(a) use a plain-text secret (b) install the git "master" branch, and use RadSec. (c) use IPSec for connectivity There are no other choices. Alan DeKok.