[OpenAFS] packet sniffing and file content

Derek Atkins warlord@MIT.EDU
13 Jul 2001 10:47:15 -0400


This was added to OpenAFS, so it is not in the IBM clients.  I have no
idea what IBM plans to do, or what patches to OpenAFS they may choose
to incorporate into their proprietary products.

You can always use an OpenAFS client against the IBM/Transarc Servers.

-derek

"David R Boldt" <dboldt@usgs.gov> writes:

> Derek,
> 
> was this added after the IBM/Transarc fork, or was it available
> in the original code?  I have IBM/Transarc clients, and this
> seems not to be an option for them.
> 
> one of the AFS support people from IBM was under the impression
> that IBM might incorporate enhancements developed by OpenAFS;
> do you have any sense of this?
> 
>                                           -- David Boldt
>                                              <dboldt@usgs.gov>
> 
> 
> 
>                                                                                      
>                     Derek Atkins                                                     
>                     <warlord@MIT.        To:     David Boldt <dboldt@usgs.gov>       
>                     EDU>                 cc:     openafs-info@openafs.org            
>                                          Subject:     Re: [OpenAFS] packet sniffing  
>                     07/13/01             and file content                            
>                     10:17 AM                                                         
>                                                                                      
>                                                                                      
> 
> 
> 
> "fs setcrypt on" on the client will turn on file encryption.  It
> only uses fcrypt(), which only provides token encryption, but
> it is better than cleartext.
> 
> There is work underway to improve this.
> 
> -derek
> 
> David Boldt <dboldt@usgs.gov> writes:
> 
> > What options are available to protect file contents
> > from packet sniffing?  Is this a concern?
> >
> > I am not a subscriber to this mail list.
> >
> >          -- David Boldt
> >              dboldt@usgs.gov
> >
> > _______________________________________________
> > OpenAFS-info mailing list
> > OpenAFS-info@openafs.org
> > https://lists.openafs.org/mailman/listinfo/openafs-info
> 
> --
>        Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
>        Member, MIT Student Information Processing Board  (SIPB)
>        URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
>        warlord@MIT.EDU                        PGP key available
> 
> 
> 
> 

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available