RE: Citrix Traffic

["Murda Mcloud" <murdamcloud () bigpond com>]

What bout the auth phase-is that ever unencrypted? 

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Lariviere, Stephen G
Sent: Friday, June 15, 2007 4:46 AM
To: Murda Mcloud; blocked () hotmail com; security-basics () securityfocus com
Subject: RE: Citrix Traffic

Citrix supports basic and up 128RC5 encryption for the session data
contained in the ICA stream.




-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Murda Mcloud
Sent: Wednesday, June 13, 2007 9:56 PM
To: blocked () hotmail com; security-basics () securityfocus com
Subject: RE: Citrix Traffic

That's what I thought-didn't the OP say unencrypted? Made me scratch my
head
and think maybe there is some test form of Citrix that is unencrypted.
It's
all ssl isn't it?

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On
Behalf Of blocked () hotmail com
Sent: Wednesday, June 13, 2007 11:40 PM
To: security-basics () securityfocus com
Subject: Re: Citrix Traffic

Citrix Traffic is Encrypted and is not easy to decode it.

-----------------------------------------
Use of email is inherently insecure. Confidential information,
including account information, and personally identifiable
information, should not be transmitted via email, or email
attachment.  In no event shall Citizens or any of its affiliates
accept any responsibility for the loss, use or misuse of any
information including confidential information, which is sent to
Citizens or its affiliates via email, or email attachment. Citizens
does not guarantee the accuracy of any email or email attachment,
that an email will be received by Citizens or that Citizens will
respond to any email. 
 
This email message is confidential and/or privileged. It is to be
used by the intended recipient only.  Use of the information
contained in this email by anyone other than the intended recipient
is strictly prohibited. If you have received this message in error,
please notify the sender immediately and promptly destroy any
record of this email.