Xymon Mailing List Archive search

Feature request: SSL/TLS client/server negotiation

list Charles Jones
Fri, 13 Oct 2006 16:41:44 -0700
Message-Id: <user-d968dd110356@xymon.invalid>

It should be fairly easy to mod the hobbit code so that it does a really simple scramble (XOR) of the data stream. If you do that, plus running it on a non-standard port, should sufficiently confuse most people running a sniffer. At least the data wouldn't be in plaintext and the attacker would have to code up a custom app to decode the data. If they have time to do that, they are probably good enough to own your network anyway.