Re: [cobalt-users] Are Raq's here to stay? (opinions wanted)

["MikeM" <MyRaQ@xxxxxxxxx>]

On 11/12/01 at 11:13 AM Edward Bishop wrote:

|I have read that when you log in to webmin or use it to change passwords
|the
|passwords are sent as plain text in an HTTP GET transaction. And once you
|are in Webmin you can change any password including root. Can any users
|comment on this?
|
|Last time I checked the Webmin site there was no mention of this issue.
|However I do use Webmin on a Linux box and agree that it's clever and
|useful in a lot of ways.
|
===========================

http://www.webmin.com/webmin/ssl.html


"If you need extra security, Webmin can use SSL to secure connections between
your web browser and the Webmin server. If you are accessing your server
over a public network like the internet, an attacker can theoretically
listen in on your connection and capture your login and password in you
do not have SSL installed.

To install SSL, follow these steps :...."