than usernames. This makes it much more difficult for somebody to "frame"
one of your users.
ie: instead of people getting:
connect from peter@spinner.DIALix.COM
in their syslogs, they will get this instead:
connect from [W+rNvCy5FuPV4xEj8thdXIlfD9qNIbzB]@spinner.DIALix.COM
The remote site will have to send it to you to decode it. When you are
given one of these cookies, you can know for sure it is not faked, and you
don't have to trust the word of the remote sysadmin when arranging your
local lame hacker-type user to meet with an unfortunate incident :-).
This feature is documented in the man pages.
Also, fix an apparent bug in the code that deals with this, but it might
be a feature of the version of libdes we have on FreeBSD.
Requested by: markm (a fair while ago)
82e68e552b