Re: dumb ssh question

Top Page
Attachments:
Message as email
+ (text/plain)
Delete this message
Reply to this message
Author: Craig White
Date:  
To: plug-discuss
Subject: Re: dumb ssh question
On Fri, 2004-03-05 at 11:27, Kevin Brown wrote:
> >>>If I have an ssh connection to another computer (I suppose it could be
> >>>the same computer) and I launch a program from that remote computer, is
> >>>that communication also encrypted via ssh?
> >>>
> >>>i.e.
> >>>
> >>>[me@mysystem]# ssh
> >>>[] # gq
> >>>
> >>>gq launches and sends everything to my screen - is that encrypted? I
> >>>certainly don't want to be shipping that info across the net
> >>>unencrypted.
> >>>
> >>>
> >>
> >>only between you and the other computer, not from the other computer to
> >>the new destination.
> >
> > ----
> > your answer confuses me - I am only discussing 2 computers - see the two
> > lines above - simulated snippet from terminal.
>
> If you SSH from Machine A to B and then Telnet from B to somewhere else, only
> the connection from A to B will be encrypted.
>
> So the answer to your question (is my traffic encrypted?) is: It depends on what
> programs you are running on the remote machine.

----
in this case, I was thinking I was going to run gq - a gtk+ driven ldap
browser. Seeing as how it contains the hashed passwords for every user
account, it seemed that if I was going to do that, it should at least be
encrypted. Hence my question. My initial assumption if I launched this
program from the remote system using the ssh connection, that it would
be encrypted but I am dumb on these matters and didn't trust my
assumption...hence my question.

I certainly recognize that if I ssh from A to B and then telnet from B
to C - that the segment of traffic between B & C would not be encrypted
and I pretty much assume that if I am sitting in front of machine A
which per the above, has opened an ssh session to Machine B which has
opened a telnet session to machine C, that the telnet session is
encrypted between A and B. My primary concern was that the network
between A and B is insecure (i.e. internet). Again though, my question
never considered a machine C at all.

Craig

---------------------------------------------------
PLUG-discuss mailing list -
To subscribe, unsubscribe, or to change you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss