Re: Do we have standards available for scp ??

[Markus Friedl <markus%openbsd.org@localhost>]

On Tue, Jan 15, 2002 at 01:44:33PM -0500, Andrew Brown wrote:
> >> Frankly, it would be also good to document RCP and to have a lengthy
> >> description of why RCP is a bad idea operationally (e.g. list of
> >> security risks with RCP) and even suggest using SCP instead (to
> >> reduce security risks).
> >
> >But SCP == RCP (the protocols), so either _both_ are secure
> >or _none_.
> 
> well...yes and no.  they are almost the same, but there are also
> places where they differ radically, depending on your point of view.
> for example, in the source() routine of my netbsd-current rcp:

well, that's not really a protocol issue.

> >Well, documenting SCP means documenting RCP.
> 
> otoh, an existing document covering rcp would make the scp document a
> lot easier.

sure.

I just wonder why nobody seems to care about core protocol issues,
but everybody cares about scp.