On Tue, 20 Mar 2001, D. R. Evans wrote:

> Newer modems almost universally adhere to the DOCSIS 1.0 specification (or 
> its European equivalent). That uses single DES (i.e., 56-bit) encryption. 
> 1DES is insufficient to keep out someone who really wants to decrypt what 
> you're doing, but it should be enough to dissuade the casual observer.

I'm not sure how universal their adherence is as Motorola CyberSURFR, a
fairly widely used modem by @Home, arguably the largest cable modem ISP,
has tripple-DES encryption for at least about 3 years now.  Here are the
specs:

http://ecc400.com/motorola/modemspec.htm

I agree that single DES is not enough to keep away someone who is really
interested or really bored.

> Note, however that this applies only to the access network (i.e., it keeps 
> the neighbours out). Once the packets hit the CMTS, they're decrypted and 
> forwarded as vanilla IP packets. 

This is true.  Although encryption is usefull, I would also like to point
out that few have access to transit lines and few of those have the
equipment, technical know-how, and the desire to sniff one's particular
conversation.  That's not to say that there isn't at least one person that
does.  I further maintain that there are more interesting targets than my
conversations.  All this said,  I'm a firm believer in using connection
level encryption in at least corporate and educational environments, and
I do, but we digress.

On a related note, I don't use message level crypto often because I don't
necessarily want people to have a fairly irrefutable proof that I wrote
something. ;)

Tom
---------------------------------------------------------------------
To unsubscribe, send a message with the line: unsubscribe vnc-list
to [EMAIL PROTECTED]
See also: http://www.uk.research.att.com/vnc/intouch.html
---------------------------------------------------------------------

Reply via email to