Re: Port-Knocking vulnerabilities?

[Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>]

On 2007-12-28 Jay wrote:
> Portknocking is a security mechanism as it is a type of
> authentication. "Something you know" in this case the sequence of
> ports to knock before a unstarted service or daemon begins listening
> for connections.

Since everything is transmitted in the clear port-knocking is as much of
a security mechanism as cleartext passwords. Technically: maybe
(depending on your definition). Realistically: no.

Regards
Ansgar Wiechers
-- 
"The Mac OS X kernel should never panic because, when it does, it
seriously inconveniences the user."
--http://developer.apple.com/technotes/tn2004/tn2118.html