[EAS] Password cracking basics

[Richard_Rudman]

Tim/All:

The more I talk to security experts about this the more I am convinced that EAS messages must carry secure end-to-end digital signatures.

There will always be some firewalls that are not secure, there will always be people who never change default passwords. Even if people put in stronger passwords and secure their firewalls, that may not be enough. 

Adding in end-to-end digital signatures would at least give us another level of assurance that messages carried over the system are authentic. This was proposed at one point in the evolution of CAP-enhanced EAS -- and will be proposed again in light of what happened.

Richard Rudman

> 
> But if you have a better idea, it would be interesting to hear it.
> 
> Tim Stoffel, KNPB
> 
> __________________________________________________________
> The EAS Forum Discussion List is hosted by the BWWG (Broadcast Warning Working Group). http://eas.radiolists.net
> Please invite your friends to join our Forum! The sign up is at: http://lists.radiolists.net/mailman/listinfo/eas
> ___________________________________________________________
>