RIPE 51 Wireless Security

• Reminder: Do not use clear text passwords
• Packet transport over the Internet is not secure

You should consider the wireless network at RIPE Meetings an unsecure network. It is very easy to sniff the network traffic and obtain passwords. As we are using a temporary network installed in an open meeting area with physical access available to anyone, we can make no guarantees about its physical security. End-to-end encryption (e.g., ssh, IPSEC, https) is crucial to protect your data and privacy.

We recommend the following:

• Use ssh for any terminal connection. If you must connect to a system that doesn't support ssh, at least ssh to an intermediate system to make sure that the portion crossing the local network is encrypted.
• Use scp or sftp instead of non-anonymous ftp; remember that ftp passwords are sent in the clear.
• If using IMAP or POP, configure your mailer to use SSL, or at least APOP.
• If using a web-based interface (e.g. Exchange), make sure to use the https: URL.
• Remember that any form submission or web password entry may cross the network in the clear.