[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Qemu-devel] [PATCH v2] vnc: disable VNC password authentication (se

From: Alexander Graf
Subject: Re: [Qemu-devel] [PATCH v2] vnc: disable VNC password authentication (security type 2) when in FIPS mode
Date: Thu, 3 May 2012 10:51:15 +0200

On 03.05.2012, at 10:29, Daniel P. Berrange wrote:

> On Wed, May 02, 2012 at 03:32:56PM -0400, Paul Moore wrote:
>> FIPS 140-2 requires disabling certain ciphers, including DES, which is used
>> by VNC to obscure passwords when they are sent over the network.  The
>> solution for FIPS users is to disable the use of VNC password auth when the
>> host system is operating in FIPS mode.

So that means "no password" is more secure according to FIPS than "DES 
encrypted password"?


reply via email to

[Prev in Thread] Current Thread [Next in Thread]