Subj : Mironet
To   : Oli
From : Alan Ianson
Date : Sat Feb 11 2023 08:19 am

>> ? 11 Feb 00:00:36 [78274] Warning: remote set UNSECURE session
>> + 11 Feb 00:00:36 [78274] pwd protected session (MD5)

> This means your system is sending a session password, but the remote session
> has no password set for incoming connections and returns M_OK 'non-secure',
> which gets logged as "Warning: remote set UNSECURE session".
> (a wrong password should return an error)

> It is not a password protected or encrypted session, even if binkd tells you
> so. It is a security flaw of binkd though.

Is that a misconfiguration at the remote end, there is no (or an incorrect) 
password set?

Binkd should not log "pwd protected session (MD5)" in that case.

--- BBBS/Li6 v4.10 Toy-6
 * Origin: The Rusty MailBox - Penticton, BC Canada (1:153/757)

.