[Info-vax] Casting IPsec before swine

[Bill Pechter]

In article <4PidnSyiv9mg80rUnZ2dnUVZ_jKWnZ2d at giganews.com>,
Richard B. Gilbert <rgilbert88 at comcast.net> wrote:
>Richard Maher wrote:
>> Hi Steven,
>> 
>> "Steven Underwood" <nobody at spamcop.net> wrote in message
>> news:7UvBl.413$9t6.403 at newsfe10.iad...
>>>
>>> "Richard Maher" <maher_rj at hotspamnotmail.com> wrote in message
>>> news:gr4vcr$5sk$1 at news-01.bur.connect.com.au...
>>>> You'll find heaps more on the IBM, SUN, HPUX, Apple OSX, and Microsoft
>>>> Windows sites if you could be botthered looking.
>>>>
>>> Richard: I looked at the HP site you highlight and right away, the first
>>> paragraph does not describe my needs at all.
>>>
>>> "Your employees are spending more hours working away from their desks:
>>> working from home, working on the road, working in meetings, working at
>>> customer sites. Across industries, professionals and knowledge workers
>>> perform their work away from their desks more than half the time."
>> 
>> That was just one focused example/link of HP/UX targetting a specific
>> application and/or industry segment. The following two links I
>also provided
>> were a general description of IPsec and its functionality, also from the
>> HPUX pages. Futhermore, I pointed out that there are oodles of web pages
>> readily available (from Wikipedia to IBM to SUN to Microsoft et al) that
>> describe what IPsec can do for you and what many other people in your
>> demographic find it useful for. I've even provided the spartan
>HP/VMS IPsec
>> link, but here it is again: -
>> http://h71000.www7.hp.com/openvms/products/ipsec/
>> 
>> Secure mobile networking and hand-held devices happen to be a bit of a hot
>> topic at the moment, if you're into that sort of thing. But, you're right,
>> it's not for everyone.
>> 
>>> Well, I work in the insurance industry with a large (90-95% of our
>>> employees) phone bank, and as such are tied to their desks.  Our VMS
>> system
>>> is primarily an end user of the data in the Oracle DB's on other
>> platforms.
>>> Batch processing of that data and some home grown Cobol programs are what
>> is
>>> running.
>> 
>> Just curious, but how are you securing the traffic from your desktops (or
>> specific applications on your desktops) to your servers at the
>moment? SSH?
>> HTTPS? Stunnel? "They're in the same building, so what"?
>> 
>
>I worked in IT for many years and I don't think we EVER worried about 
>securing our internal traffic!  At McGraw-Hill we networked with about 
>100 field offices and six "print centers" without using any encryption 
>that I was aware of.
>
>Now SOME traffic requires encryption for reasons of security, 
>authentication, or both.  Most does not.

Well I've seen some things done with arp cache poisoning that let you
rather easily steal someone's accesses and passwords.

I think it's time for encrypted traffic from desktop to server on all
connections.

Bill
-- 
-- 
Digital had it then.  Don't you wish you could buy it now!
              pechter-at-pechter.dyndns.org