<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal>Aaron, of course you’re right that telnet protocol is not encrypted (by international open standard), but use of any encryption for authentication is at best in the grey area of FCC Part 97 regs. It would seem reasonable that it should be legal, but likely will require future modification of Part 97 to make it so, as the way Part 97 presently reads it does not appear to be to me, but I’m now a lawyer, I just play one on the internet <span style='font-family:"Segoe UI Emoji",sans-serif'>😃</span> Meanwhile, since TLS/SSL is used to encrypt the session traffic in addition to authentication, there clearly is a problem there regarding the Winlink connection to CMS; your suggestion of separating authentication from the session traffic in some manner is worth investigating to at least move in the right direction. But it could be that RMS Relay may be the only way to go, with an interim RMS server in the cloud somewhere to connect to CMS.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I just got back last night from a long weekend camping trip and will find some time this week to do a Wireshark capture of the client side to analyze, as that is a good idea. Will report back to the group later this week on what I find.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal> Cheers, Stephen<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> PSDR <psdr-bounces@hamwan.org> <b>On Behalf Of </b>Aaron Taggert<br><b>Sent:</b> Monday, March 15, 2021 11:49 PM<br><b>To:</b> Puget Sound Data Ring <psdr@hamwan.org><br><b>Subject:</b> Re: [HamWAN PSDR] Newbie<o:p></o:p></p></div><p class=MsoNormal><o:p> </o:p></p><div><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><span style='font-family:"Arial",sans-serif;color:black'>TLS/SSL for authentication is ok. FTP is not an encrypted protocol, neither is telnet. The internet gateway could serve as an TLS/SSL proxy if the client accepted the non encrypted certificate from the gateway.</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><span style='font-family:"Arial",sans-serif;color:black'>To actually see what's happening you should use wireshark to see the actual packets.</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><span style='font-family:"Arial",sans-serif;color:black'>Aaron - KJ7TXR</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'>Pictures: <a href="https://avinetworks.com/glossary/ssl-proxy/">What is a SSL Proxy? Definition & Related FAQs | Avi Networks</a><o:p></o:p></p></div></div></div></div></body></html>