Subj : Re: SSH on BBSes
To   : 2twisty
From : Warpslide
Date : Fri Apr 01 2022 09:51:02

On 31 Mar 2022, 2twisty said the following...

 2t> I will make it my mission to educate them.  

One thing to keep in mind about this whole SSH/Cleartext discussion (we've had it before, do a %RESCAN here and in FSX_NET), more can be done to secure your board, but not much can be done to secure echomail.

By default Mystic doesn't use SSL when sending messages out via binkp, so you can use SSH to log into your board (which will protect your credentials logging in) and type a message in these echos, but then it will be sent out in cleartext via binkp.

Now, you can setup an SSL connection with your hub, but that would mean every node connected to that hub would also need to use SSL.  This also doesn't take into account Synchronet boards who over these messages bases via http:

http://vert.synchro.net/?page=001-forum.ssjs&sub=fsx_gen

Give it a little bit and this message I'm typing right now over an SSH connection, (I should probably be actually working), will be fully visible there.  There are also boards who make these message bases available over NNTP.


Jay

.... Never try to out-stubborn a cat.

--- Mystic BBS v1.12 A48 2022/03/26 (Raspberry Pi/32)
 * Origin: Northern Realms (21:3/110)

.