Re: [Qemu-devel] QEMU: VNC

[Christopher Olsen]

In regards to all this

Johannes... You're correct the challenge response method for authentication 
inside of VNC isn't secure at all it's like locking your screen door at home 
will keep most people out just not the ones who really want to get in...

I've done some further thought and investigation and as far as using QEMU 
inside a Unix environment, I see no reason as to why the authentication 
couldn't be tied into PAM...

Any thoughts?

-Christopher


On Sunday 18 February 2007 21:48, Anthony Liguori wrote:
> Johannes Schindelin wrote:
> > Hi,
> >
> > On Sun, 18 Feb 2007, Anthony Liguori wrote:
> >> Christopher Olsen wrote:
> >>> Sorry I'll attempt to use the preferred patching method in the future..
> >>>
> >>> Secure vnc auth method the default built in method from
> >>
> >> We can't take a password from a command line.  Supporting VNC auth is
> >> super easy otherwise.  I really think we need to have a config file
> >> before we can do VNC passwords.
> >
> > No, you should not do VNC passwords. The default VNC password exchange is
> > insecure and you should not lure users into believing in that false
> > security.
>
> I actually agree with you.
>
> Regards,
>
> Anthony Liguori
>
> > Ciao,
> > Dscho
>
> _______________________________________________
> Qemu-devel mailing list
> address@hidden
> http://lists.nongnu.org/mailman/listinfo/qemu-devel

-- 
Christopher Olsen
address@hidden
Tel: 631-676-4877
Fax: 631-249-3036