-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 20 Mar 01, at 11:15, [EMAIL PROTECTED] wrote:
> On Sat, 17 Mar 2001, Tim Waugh wrote:
>
> > It means that anyone who is on the path that the TCP/IP packets take
> > through the Internet can do bad things. So for instance, if you are
> > using cable, anyone on the same segment as you could observe what you
> > are doing, if they felt the need.
>
> One should note howeve that many, if not all cable modems feature some
> kind of encryption. For example the one I used, made by Motorola, used
> tripple DES.
>
A few old proprietary systems for cable access are still being deployed,
and they often do not have good encryption.
Newer modems almost universally adhere to the DOCSIS 1.0 specification (or
its European equivalent). That uses single DES (i.e., 56-bit) encryption.
1DES is insufficient to keep out someone who really wants to decrypt what
you're doing, but it should be enough to dissuade the casual observer.
Note, however that this applies only to the access network (i.e., it keeps
the neighbours out). Once the packets hit the CMTS, they're decrypted and
forwarded as vanilla IP packets.
(For the pedants among us, actually they're "raw IP" even on the access
network; but since the MAC layer is encrypted with the aforesaid 1DES, one
can't easily get at the raw IP.)
Doc Evans
-----BEGIN PGP SIGNATURE-----
Version: PGP 6.0.2 -- QDPGP 2.60
Comment: Key obtainable from servers: ID 0x362912B8
iQA/AwUBOrekk2nXrLw2KRK4EQLcfACg3FvsLaGgK5r/T7UDLiSkDXd7bkoAnRYo
iDdrbceKznc+qQ6N+5PjgJ5m
=sgK6
-----END PGP SIGNATURE-----
----------------------------------------------------------
D.R. Evans N7DR / G4AMJ [EMAIL PROTECTED]
Two assassins and one very manipulative businessman:
"Reflexive Action" is now available.
See http://www.sff.net/people/N7DR/drevans.htp for details.
----------------------------------------------------------
---------------------------------------------------------------------
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
---------------------------------------------------------------------