Meeting Home

Meeting Intro

Attendees List

BoF RIPE NCC
Services


Connectivity

Dinner Venue

EOF

Event Sponsorship

General Info

Hostmaster Centre

Hotel Information

Meeting Plan

Meeting Venue

Minutes

Plenary Agenda

Presentations

Registration

Tutorials & Courses

Webcasting

WG Agendas

Contact Meeting

RIPE 45 Meeting

Note about Wireless Security

Reminder: Don't Use Cleartext Passwords!
Packet Transport Over the Internet Isn't Secure

At home you may be used to having a network that you believe to be secure, e.g., because you use switches and physical security. But when you use someone else's network, you need to rethink that assumption. The wireless 802.11 network that the RIPE Meeting provides is a particularly good example: anyone, including someone sitting in a Hotel Room with less than $1,000 of off-the-shelf equipment, can sniff all the traffic crossing the network. This means that end-to-end encryption (e.g. ssh, IPSEC, https) is crucial to protecting your data and privacy.

We are not using any firewall to protect laptop use. Because we're using a temporary network installed in an open meeting area, no guarantees can be made about its physical security.

For these reasons, we recommend the following:

  • Use ssh for any terminal connection. If you must connect to a system that doesn't support ssh, at least ssh to an intermediate system (hopefully one in a more trustworthy part of the network) to make sure that the portion crossing the local network is encrypted.
  • Use scp or sftp instead of non-anonymous ftp; remember that ftp passwords are sent in the clear.
  • If using IMAP or POP, configure your mailer to use SSL, or at least APOP.
  • If using a web-based interface (e.g. Exchange), make sure to use the https: URL.
  • Remember that any form submission or web password entry may cross the network in the clear.