diff options
| author | David F. Skoll <dfs@roaringpenguin.com> | 2002-04-02 13:55:00 +0000 |
|---|---|---|
| committer | David F. Skoll <dfs@roaringpenguin.com> | 2002-04-02 13:55:00 +0000 |
| commit | b38527fb14af5ebe3d2559e2f861575c722a1ce9 (patch) | |
| tree | 1008ee5780156bc7668fb375b65878385d25afc9 /README.MSCHAP81 | |
| parent | 2ddcabd59d372be3f66c42ed9df15ca7a474ac2a (diff) | |
| download | ppp-b38527fb14af5ebe3d2559e2f861575c722a1ce9.tar.gz | |
First large MPPE patch from Frank Cusack.
Diffstat (limited to 'README.MSCHAP81')
| -rw-r--r-- | README.MSCHAP81 | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/README.MSCHAP81 b/README.MSCHAP81 index 1d415a9..c8e83f3 100644 --- a/README.MSCHAP81 +++ b/README.MSCHAP81 @@ -16,7 +16,7 @@ as plaintext-equivalent. (Well, the Change-Password packet is arguably an advantage.) It does introduce a significant weakness if the LM hash is used. Additionally, the format of the failure packet potentially gives information to an attacker. The weakness of the LM hash is partly -address in RFC 2433, which deprecates its use. +addressed in RFC 2433, which deprecates its use. MS-CHAPv2 adds 2 benefits to MS-CHAP. (1) The LM hash is no longer used. (2) Mutual authentication is required. Note that the mutual |