Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 23 Oct 2002 11:36:48 -0700
From:      Terry Lambert <tlambert2@mindspring.com>
To:        Steven Ames <steve@virtual-voodoo.com>
Cc:        David Schultz <dschultz@uclink.Berkeley.EDU>, Lucky Green <shamrock@cypherpunks.to>, freebsd-current@FreeBSD.ORG
Subject:   Re: Request: remove ssh1 fallback
Message-ID:  <3DB6EC40.15B858B9@mindspring.com>
References:  <007501c27a5c$27203fc0$6501a8c0@VAIO650> <20021023155753.GB7503@HAL9000.homeunix.com> <004401c27aad$740a5400$33d90c42@officescape.net>

next in thread | previous in thread | raw e-mail | index | archive | help
Steven Ames wrote:
> > Thus spake Lucky Green <shamrock@cypherpunks.to>:
> > > I therefore believe that the 5.0 release represents a perfect
> > > opportunity to remove ssh1 fallback from the default distribution of
> > > FreeBSD and hope the FreeBSD team will consider this change.
> >
> > Making SSH 2 the default is one thing.  Removing SSH 1 as a
> > fallback altogether is going to break compatibility with other
> > systems like you'd never believe.  For example, I regularly need
> > to SSH into Solaris boxen running SSH 1.  These machines aren't
> > secure anyway, and since there's nothing I can do about it, I
> > don't want any surprises when I upgrade.
> 
> I think he was suggesting removing it from the sshd server, not
> the client. You can always specify the protocol on the command
> line with the client even if it didn't fall back... and again he's
> suggesting it for the default configuration, you can always change
> the configuration. I'm not necessarily for this change I just want
> to be sure what change is being suggested :)

What if the client machine is a SSH1 Solaris (or Windows) box
going into a FreeBSD rackmount?

It should *at least* be available as a command line option to
the daemon; since some boxes *don't have* consoles at all, it
would have the same effect of turning them into a doorstop to
disable this flag, once it's available, by default (right now,
it just provides both).

The problem with interoperability is that it's not unidirectional.

-- Terry

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3DB6EC40.15B858B9>