X-Git-Url: http://git.ozlabs.org/?p=ppp.git;a=blobdiff_plain;f=README.MSCHAP81;h=91199f368bd079a491f755ed2304eba56fe5b5a7;hp=1d415a9753222ea5418f2f47cae47c96342a851a;hb=37476164f15a45015310b9d4b197c2d7db1f7f8f;hpb=bcfa20820fc9ff3b25bcf62308e3e737c1897dc6 diff --git a/README.MSCHAP81 b/README.MSCHAP81 index 1d415a9..91199f3 100644 --- a/README.MSCHAP81 +++ b/README.MSCHAP81 @@ -16,7 +16,7 @@ as plaintext-equivalent. (Well, the Change-Password packet is arguably an advantage.) It does introduce a significant weakness if the LM hash is used. Additionally, the format of the failure packet potentially gives information to an attacker. The weakness of the LM hash is partly -address in RFC 2433, which deprecates its use. +addressed in RFC 2433, which deprecates its use. MS-CHAPv2 adds 2 benefits to MS-CHAP. (1) The LM hash is no longer used. (2) Mutual authentication is required. Note that the mutual @@ -55,7 +55,7 @@ RFC 2759: You'll see these in your pppd log as a line similar to: - Remote message: No dialin permission + Remote message: E=649 No dialin permission Previously, pppd would log this as: