Re: pcanywhere encryption

[Adam Shostack <adam () homeport org>]

On Fri, Jan 26, 2001 at 06:46:05PM -0500, Randy Witlicki wrote:
|   Here's my twist to the issue:
| 
|   I will contend (IF and ONLY IF the crypto is done right) that
| it is better to provide a telecommuter with remote access via
| a PCAnywhere (or VNC) type of connection and not a VPN.
|   The reason is that you are only trusting one application to go
| behind the corporate perimeter defense.  A VPN lets *any* application
| running on the home PC (or perhaps the home LAN for that matter)
| to be trusted.

Its my understanding that PC Anywhere allows me to control the remote
PC.  If the app that goes through the perimeter can control a full
host on the inside, then I fail to see what benefit your distinction
brings?

Adam


-- 
"It is seldom that liberty of any kind is lost all at once."
                                                       -Hume


_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards