Root listening or paranoid?

[chiappa]

For example, lets consider the following scenario: "One is running unrealircd on a linux box, as a regular user. With only SSL encrypted traffic."

The question is, how possible would it be for the administrator to listen to the conversations made on the ircd server?

thx!

[Stealth]

If all traffic is SSL, and there are no services and no bots on that server, it is highly unlikely that anyone would be able to "listen in"

[Syzop]

.. but still possible if you know how (I've successfully tried it on my own net) >:)
So it's quite recommended you have some trust in the people with root access.

[Jobe]

.. but still possible if you know how (I've successfully tried it on my own net) >:)
So it's quite recommended you have some trust in the people with root access.

Or for that matter, anyone with access to a router between you and your server, and between your servers, etc...

Although someone with access to one of those routers are even less likly to snoop then a trustworthy root.

[Syzop]

Jobe1986: SSL

[Jobe]

Jobe1986: SSL

Yeah, I always use SSL where possible, and require server to server links on my net to use SSL too.