I think SSH is the best route to go in general, for a few reasons. (1) If you set up application A to run over SSH, when people start worrying about B through Z it's simple to plug in.
(2) From what I understand, you make almost anything run over SSH. (Take that with a chunk of salt, though - I've only done it with about 3 things in the past). (3) As opposed to many other secure connections, it apparently tends to do a good job of compressing data. This is based on the ORL/AT&T comments about SSH, not broad personal experience. I can tell you that I found several console sessions I have runs using SSH to remote systems to be extremely peppy. (4) Usage out there is wide, even though not common. It works for both Unices and Windows, of course. Note that the issue of browser interface is not excluded by using SSH either. You can tunnel that through the SSH connection if someone wants to use a browser on their end; whatever they use, the packets then get passed out in the SSH tunnel. ----- Original Message ----- From: "Jeff Baldwin" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday/2002 February 05 17:08 Subject: Secure Windows Connection : Ok.. I have seen this topic aeveral times on this list, and each time it : seems it has come to a somewhat unclear conclusion (at least in my : mind). Finally, I have run into the same road block as many others, I : have numerous VNC Servers on 'our' network and the idea of insecure : communications across the network is really starting to 'irk' me. : : With the information I gain/apply here, I will write up a complete howto : for securing VNC connections. Ok.. w/ that said, I now have to ask some : questions.. : : What is the 'best' most secure way to communicate w/ VNC Server on a : network? : : Most of my clients are Windows users, however I use ONLY Linux and have : many spare Linux boxen that I could use as 'middle men' if neccesary to : port forward the SSH connection. : : So, basically all I'm looking to do here is find out how to secure a VNC : connection, should I use the browser interface, ssh, etc..?? : : Thanks : : Jeff : --------------------------------------------------------------------- : To unsubscribe, mail [EMAIL PROTECTED] with the line: : 'unsubscribe vnc-list' in the message BODY : See also: http://www.uk.research.att.com/vnc/intouch.html : --------------------------------------------------------------------- --------------------------------------------------------------------- To unsubscribe, mail [EMAIL PROTECTED] with the line: 'unsubscribe vnc-list' in the message BODY See also: http://www.uk.research.att.com/vnc/intouch.html ---------------------------------------------------------------------
