Re: iSCSI:SRP

[Theodore Tso <tytso@mit.edu>]

On Thu, Apr 11, 2002 at 01:46:37AM -0700, Andre Hedrick wrote:
> 
> Sorry to be a lurker in the back ground, but we are talking about digital
> security and access to what one would assume to be sensitive content.
> 
> The senerio of flashed based laptops with mobile radio IP transport, aka
> cell-technology et al., and off site access to home office content is
> highly desired.  However, laptops or pda's can be lost of borrowed without
> permission, and a simple CHAP could be hacked by joe-six-pack.

Andre, you do realize that a D-H/CHAP combination is far more secure
than simple CHAP?  No one has been advocating simple CHAP.

Also note that on a mobile IP network, given the complete lack of
crypto of most TCP/UDP protocols currently in wide use, there may very
well be a layer 2 encryption scheme in use (i.e., WEP done
non-stupidly).

						- Ted