Re: Secure and convenient protocol
"Gregoire leroy" <[email protected]>
| Newsgroups | gmane.network.poptop |
|---|---|
| Message-ID | <[email protected]> |
On Tue 26/04/11 07:18, James Cameron [email protected] wrote: > On Thu, Apr 21, 2011 at 04:21:05PM +0200, Gr?goire Leroy wrote: > > Is bruteforce attack the only problem with MSCHAPV2 > ? > No, it can be transparently attacked by capture of the datastream, and > since the MSCHAP tokens are used as MPPE keys, and it is only 128-bit > encryption, and the same keys are used at each end, the data is easily > obtained. I've seen kiddies video (kiddies scripts/tuto are my real target) which said that they forced the server to use MSCHAP-V1. Can it work if we use "refuse mschap" directive ? Regards, Grégoire Leroy ------------------------------------------------------------------------------ WhatsUp Gold - Download Free Network Management Software The most intuitive, comprehensive, and cost-effective network management toolset available today. Delivers lowest initial acquisition cost and overall TCO of any competing solution. http://p.sf.net/sfu/whatsupgold-sd _______________________________________________ Poptop-server mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/poptop-server