Connection to Webmin

[James Wilkinson]

Nathaniel Hall wrote:
> True, webmin does use the loopback interface.  However, every read or 
> change must be transmitted two and from the client machine, including 
> the username and password used to access it.  Anybody on the inside of 
> the network could easily sniff all of the information they need.

Um. If you're using the loopback interface, then the traffic goes
nowhere near the network card. It doesn't physically get on to the
network.

If there is a separate client machine, then you're not using the
loopback interface, and the example given (http://localhost:10000) won't
work anyway.

(And, of course, if you don't trust the network, then you should encrypt
sensitive traffic that goes over it, like remote Webmin sessions.)

James.

-- 
E-mail address: james | Legacy (adj):
@westexe.demon.co.uk  | an uncomplimentary computer-industry epithet that
                      | means 'it works'.
                      |     -- Anthony DeBoer