Message-Id: <200208312333.TAA05823@bearing-an-hourglass.mit.edu>
From: Jonathon Weiss <jweiss@MIT.EDU>
To: bug-dialup@MIT.EDU
Subject: test.dialup.mit.edu now requires encryption
Date: Sat, 31 Aug 2002 19:33:53 -0400
Sender: jweiss@MIT.EDU


Hello,

As you may know, Athena Server Operations has been working with the
Network Security Team to phase out unencrypted connections to the
Athena dialups*.  You should expect an announcement soon about the
first phase (which will probably occur in mid-October, and involve
disabling unencrypted connections from on campus).  In order to assist
people in preparing for this change, test.dialup.mit.edu no longer
accepts unencrypted connections**.  If you encounter people who are
having trouble configuring their software, you may have them test it
against test.dialup.mit.edu.  However, please note that they should
not start using test.dialup.mit.edu for day-to-day work unless they
are willing *and* capable of submitting bug reports when they
encounter problems (encryption isn't the only testing we do on this
machine).  If you encounter a situation where test.dialup.mit.edu does
allow an unencrypted connection, or have other problems with its
configuration, please drop a note to bug-dialup@mit.edu.

	Jonathon Weiss
	jweiss@mit.edu
	MIT/IS Athena Server Operations


* This is being done as part of a longer term goal of eliminating all
  unencrypted passwords on campus.

** Encryption is required from both on and off campus hosts.  The only
   exceptions are the CPTs (pasta pads) and the dialups themselves
   (since tunneling ftp over ssh can appear as an unencrypted
   connection from a dialup to a dialup).