holes.txt

伯克利做的SFTP安全文件传输协议

Known security holes in SafeTP
------------------------------
Trust first time.


Other possible avenues of attack
--------------------------------
Storage of keys unencrypted.
Storage of keys in memory.
In-transit network attacks on binaries.


Holes if NFS is used improperly
-------------------------------
Network sniffing attacks on keys.