Re: Question: draft-ops-operator-req-mgmt-00.txt

[Harrie Hazewinkel <harrie@covalent.net>]

Randy Bush wrote:
> 
> >> and we're the ones whose cash you want.  so start studying the religious
> >> texts.  you might start with <draft-ops-operator-req-mgmt-00.txt>.
> > I read this and I am not an operator, so it is maybe not my requirement.
> > But I was wondering if there was a reason why this document is
> > focused so much on the system level and not on the application level.
> 
> because turning on http and other applications in a router is a known
> security disaster.

One could use HTTP over SSL instead of plain HTTP.
On top of that you do user authentication and you
have the same as SSH, but now a nice Web-based GUI. :-))

OK, I will admit anything which you turn on to provide
as access have security risks.

Harrie
-- 
address: Covalent Technologies, 645 Howard St, San Francisco, CA - 94105
phone: +1-415-536-5221                               fax:+1-415-536-5210
personal website: http://www.lisanza.net/