X-Git-Url: https://git.ozlabs.org/?p=ppp.git;a=blobdiff_plain;f=README.MSCHAP81;h=c8e83f3966987afa0619386484e9295e301c76f6;hp=1d415a9753222ea5418f2f47cae47c96342a851a;hb=b38527fb14af5ebe3d2559e2f861575c722a1ce9;hpb=bcfa20820fc9ff3b25bcf62308e3e737c1897dc6 diff --git a/README.MSCHAP81 b/README.MSCHAP81 index 1d415a9..c8e83f3 100644 --- a/README.MSCHAP81 +++ b/README.MSCHAP81 @@ -16,7 +16,7 @@ as plaintext-equivalent. (Well, the Change-Password packet is arguably an advantage.) It does introduce a significant weakness if the LM hash is used. Additionally, the format of the failure packet potentially gives information to an attacker. The weakness of the LM hash is partly -address in RFC 2433, which deprecates its use. +addressed in RFC 2433, which deprecates its use. MS-CHAPv2 adds 2 benefits to MS-CHAP. (1) The LM hash is no longer used. (2) Mutual authentication is required. Note that the mutual