On 2019-09-26 15:06, Alan DeKok wrote:
n Sep 26, 2019, at 2:29 PM, Dan Swartzendruber <dswartz@druber.com> wrote:
On 2019-09-26 14:18, Alan DeKok wrote:
On Sep 26, 2019, at 2:11 PM, Dan Swartzendruber <dswartz@druber.com> wrote:
No argument here. Unfortunately, some of our customers are anal-retentive and have security compliance audits run, and having cleartext passwords is going to be problematic. The passwords aren't clear-text. They're encrypted on the wire. Just like PAP.
I thought I had seen criticisms that it the encryption wasn't that strong. Maybe I misunderstood...
Yes. Lots of people have criticized it. Mainly people who know nothing about nothing.
The encryption scheme is best described as "wonky". But no one has managed to crack it. Anyone who says otherwise is lying.
If it had been cracked, you would see it on international news. Every ISP and switch manufacturer would be frantically upgrading.
Good to know, thanks for setting me straight. I'm going to let sleeping dogs lie :)