|
Meeting
Home
Meeting
Intro
Attendees
List
BoF RIPE NCC Services
Connectivity
Dinner
Venue
EOF
Event
Sponsorship
General
Info
Hostmaster
Centre
Hotel
Information
Meeting
Plan
Meeting
Venue
Minutes
Plenary
Agenda
Presentations
Registration
Tutorials
& Courses
Webcasting
WG
Agendas
Contact
Meeting
|
RIPE 45 Meeting
Note about Wireless Security
Reminder: Don't Use Cleartext Passwords!
Packet Transport Over the Internet Isn't Secure
|
At home you may be used to having a network that you believe to be secure,
e.g., because you use switches and physical security. But when you use
someone else's network, you need to rethink that assumption. The wireless
802.11 network that the RIPE Meeting provides is a particularly good example:
anyone, including someone sitting in a Hotel Room with less than $1,000
of off-the-shelf equipment, can sniff all the traffic crossing the network.
This means that end-to-end encryption (e.g. ssh, IPSEC, https) is crucial
to protecting your data and privacy.
We are not using any firewall to protect laptop use. Because we're using
a temporary network installed in an open meeting area, no guarantees can
be made about its physical security.
For these reasons, we recommend the following:
- Use ssh for any terminal connection. If you must connect to a system that doesn't
support ssh, at least ssh to an intermediate system (hopefully one in a more
trustworthy part of the network) to make sure that the portion crossing the local
network is encrypted.
- Use scp or sftp instead of non-anonymous ftp; remember that ftp passwords are
sent in the clear.
- If using IMAP or POP, configure your mailer to use SSL, or at least APOP.
- If using a web-based interface (e.g. Exchange), make sure to use the
https: URL.
- Remember that any form submission or web password entry may cross the
network in the clear.
|