su provides cryptographically secured authentication. which protects from tcp hijacking and spoofing. and sniffing.