[fa.info-vax] Secure-server and autobaud

info-vax@ucbvax.ARPA (05/24/85)

From: Richard Garland <OC.GARLAND@CU20B.ARPA>

I have noticed an interesting "feature" about the secure-server setting
for terminals under VMS V4.x.  What this is is that when you hit BREAK, it 
kills any process attached to that line (like hanging up the phone).  The
book says it doesn't work for Autobaud lines but it does.  The behavior
is slightly different.

	For non-autobaud lines, hit break and it will initiate the
login sequence.  <RETURN> will not initiate it.

	For Autobaud terminals, BREAK kills a process (if any) owning
the line, and then RETURN initiates the login sequence.

Personally I'm glad it works since most of my lines are autobauded and
I want the feature.

I find the greatest benifit of Secure-Server is not for security, but
when used in connjunction with disconnectable terminals, it is the perfect
disconnect key.  It works (BREAK that is) whether you are in a program or
not and whether you have PASSALL set or control-Y disabled or anything.
I just hit break, walk to the machine room (or whereever) and reconnect
to my process (even to the middle of Emacs running with PASSALL set).

Neat combination of features.

See you all in New Orleans.

					Rg
-------

info-vax@ucbvax.ARPA (05/24/85)

From: Gail Rubin <grubin@bbn-spca>

The reason for this feature is to avoid the problem of someone writing
a program that LOOKS LIKE LOGINOUT and thereby capturing account names
and passwords. At secure sites, users are supposed to type BREAK before
starting the login sequence to make sure they are talking to the real
LOGINOUT, not some program.

I'm sure this MUST be documented somewhere; I know I heard it many times
before vms 4 came out. Probably in some section on security, or the release
notes.

-- Gail Rubin
(GRubin @ bbn-spca or @bbn-unix)

See you at Decus.