Plugin SSH Today it is advicable to use secure communications as public networks, like the Internet are not secure. The secure shell ([SSH]) plugin provides an easy to use but secure way to log into a remote host. To use this plugin make sure your remote host has a secure shell server running. It may be used as a replacement for the [Plugin Telnet], which does no encryption! ~~This implementation of SSH provides __IDEA, Blowfish__ and __RSA/PKCS#1__ encryption and was originally written in 1998 by Cedric Gourio. He used a part of the old Telnet Applet to write his {link:SSH for Java|http://www.cl.cam.ac.uk/~fapp2/software/java-ssh/} client and so the code was similar to our old applet.~~ There are other implementations of ssh for Java available, but those packages implement the whole ssh protocol and all features which makes the packages very big. We tried to keep our implementation to a minimum for easier download. You can configure the plugin using the following properties: {table} Property | Documentation SSH.user | A user id to be used to log into the remote host. This may be used to set a default value for the login field. SSH.password | The password associated with the user id. __DO NOT USE THIS BECAUSE IT CAN BE SEEN BY ANY USER ON THE WEB!__ {table} __Important Security Note:__ The applet is suspectible to the __man-in-the-middle attacks__ published by {link:Security Portal|http://www.securityportal.com/cover/coverstory20001218.html}. __We cannot avoid this__. We can't even use the RSA based host authorization, since the applet itself is downloaded from the remote host, may not keep local state and might be modified by the man-in-the-middle. The only way to guard against applet modification would be having it signed with a trust certificate. This is too expensive both money- and timewise for us. So there is encryption, but it only guards against normal packetsniffing attacks. 2009-05-21 20:11:40.197 2005-11-10 14:23:57.352