Following Orrie's presentation, there was open discussion. RSA vs. Unix encryption. CS Dept is going to RSA, although there are some user training issues. If good documentation is found on the web, the URL could be sent to the mailing list. Ssh vs. Kerberos.
Switched networks can reduce some password-sniffing problems.
Linux boxes and old workstations without a proper sysadmin are very vulnerable to attack. Some interest was expressed in tools being collected to search for intruders and do security checks. The security recommendations need to be updated. We will start working on this next time. Our current policy is limited mostly to the CU-Boulder student population.