Article View: comp.security.misc
Article #577Re: Secure shell by mail
From: Barry Margolin
Date: Tue, 13 Oct 1992 20:23
Date: Tue, 13 Oct 1992 20:23
20 lines
1263 bytes
1263 bytes
In article <1992Oct13.172459.28720@zip.eecs.umich.edu> ayman@eecs.umich.edu (Ayman I. Kayssi) writes:
>I posted a question on comp.unix.questions about how to get a shell by email,
>that is a shell that would execute what's in the body of an email message.
>All the details have been worked out except for one thing: security.
How about this:
Include in the header a string in both plaintext and encrypted form. The
receiving system would decrypt the encrypted form and compare it to the
plaintext.
One problem with this is that it's quite amenable to known-plaintext
attacks. And it also requires a decryption key to be stored on the
destination system, unless you use a public-key encryption system.
--
Barry Margolin
System Manager, Thinking Machines Corp.
barmar@think.com {uunet,harvard}!think!barmar
Technical Details
Message-ID:
<1bfb87INNj22@early-bird.think.com>Path:
arc1-ca.pugleaf.net!sparky!uunet!think.com!barmarReferences:
<1992Oct13.172459.28720@zip.eecs.umich.edu>Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!think.com!barmar From: barmar@think.com (Barry Margolin) Newsgroups: comp.security.misc Subject: Re: Secure shell by mail Date: 13 Oct 1992 20:23:35 GMT Organization: Thinking Machines Corporation, Cambridge MA, USA Lines: 20 Distribution: usa Message-ID: <1bfb87INNj22@early-bird.think.com> References: <1992Oct13.172459.28720@zip.eecs.umich.edu> NNTP-Posting-Host: telecaster.think.com