The real problem, as you probably already know, is what happens at the beginning of the session - Citrix claims 128-bit SSL, which ought to be safe enough, your own sensititivies notwithstanding; but if there's any sort of clear-text challenge/response mechanism during hand-shake, then that's where the vulnerabilities lie.  It may be an issue depending on how the client node is identified to the network.
 
I'd offer more, but I've forgotten most of what I used to know.
 
Cheers
--- dhk

>>>

From: "Paul Price" <[EMAIL PROTECTED]>

To: [EMAIL PROTECTED]

Date: Tue, 28 May 2002 19:02:36 +0000

Subject: [BAWUG] Citrix Metaframe encryption and 802.11b

The Citrix metaframe client has high, medium and low encryption options when

connecting to a Citrix Metaframe server. Does anyone have any thought on

Citrix encrypted client/server data? Do you think this type of encryption

would be secure on an 802.11b network?

Any thought are much appreciated.

-Paul

<<<

Cheers,

Reply via email to