Re: U.S. Export Control Compliance
Rudi De Vos <[email protected]> Fri, 07 Jul 2006 19:37:34 +0200
| Newsgroups | gmane.network.vnc.ultravnc.general |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format. --===============0863193649== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline For feature requests and bug reports RC15 RC16. Please use the forum at http://forum.ultravnc.net/ --===============0863193649== Content-Type: multipart/alternative; boundary="------------030208010504040401000705" This is a multi-part message in MIME format. --------------030208010504040401000705 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Des is not used for data encryption, but is only used for password exchange. This is a real difference. You don't need goverment permission to distribute encryption code used for authentication purpose only. VNC+DES does not need goverment permission !!! VNC+DES+PLugin based on MS encryption does not need permission !! Correct me when i'm wrong Bob Friesenhahn wrote: >For feature requests and bug reports RC15 RC16. Please use the forum at http://forum.ultravnc.net/ > >On Fri, 7 Jul 2006, James Weatherall wrote: > > >>DES is used both in the classic challenge-response VNC Password >>Authentication scheme, and to obfuscate the password when it is stored, so >>your comment regarding "crack tools" doesn't make sense. >> >> > >My comment about "crack tools" pertains to tools which attempt to >batter their way in by trying permutations from a dictionary. Such >attacks won't work with the RealVNC server since it rejects more than >a few attempts from the same address. > >It may be that I was wrong about the VNC modification to 3DES. I was >believing the comment associated with the change in the code, but >maybe the comment is wrong. > >Bob > >Using Tomcat but need to do more? Need to support web services, security? >Get stuff done quickly with pre-integrated technology to make your job easier >Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo >http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 > > > > --------------030208010504040401000705 Content-Type: text/html; charset=us-ascii Content-Transfer-Encoding: 7bit <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta http-equiv="Content-Type" content="text/html;charset=us-ascii"> <title></title> </head> <body text="#000000" bgcolor="#ffffff"> Des is not used for data encryption, but is only used for password exchange. This is a real difference.<br> You don't need goverment permission to distribute encryption code used for authentication purpose only.<br> VNC+DES does not need goverment permission !!!<br> VNC+DES+PLugin based on MS encryption does not need permission !!<br> <br> Correct me when i'm wrong <br> <br> <br> Bob Friesenhahn wrote:<br> <blockquote type="cite" cite="[email protected]"> <pre wrap="">For feature requests and bug reports RC15 RC16. Please use the forum at <a class="moz-txt-link-freetext" href="http://forum.ultravnc.net/">http://forum.ultravnc.net/</a> On Fri, 7 Jul 2006, James Weatherall wrote: </pre> <blockquote type="cite"> <pre wrap="">DES is used both in the classic challenge-response VNC Password Authentication scheme, and to obfuscate the password when it is stored, so your comment regarding "crack tools" doesn't make sense. </pre> </blockquote> <pre wrap=""><!----> My comment about "crack tools" pertains to tools which attempt to batter their way in by trying permutations from a dictionary. Such attacks won't work with the RealVNC server since it rejects more than a few attempts from the same address. It may be that I was wrong about the VNC modification to 3DES. I was believing the comment associated with the change in the code, but maybe the comment is wrong. Bob Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo <a class="moz-txt-link-freetext" href="http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642">http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642</a> </pre> </blockquote> </body> </html> --------------030208010504040401000705-- --===============0863193649== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 --===============0863193649==--