From owner-freebsd-security Sun Jan 2 10: 5:25 2000 Delivered-To: freebsd-security@freebsd.org Received: from verdi.nethelp.no (verdi.nethelp.no [158.36.41.162]) by hub.freebsd.org (Postfix) with SMTP id 370E014EB3 for ; Sun, 2 Jan 2000 10:05:01 -0800 (PST) (envelope-from sthaug@nethelp.no) Received: (qmail 50875 invoked by uid 1001); 2 Jan 2000 18:04:58 +0000 (GMT) To: drosih@rpi.edu Cc: green@FreeBSD.ORG, security@FreeBSD.ORG Subject: Re: OpenSSH protocol 1.6 proposal From: sthaug@nethelp.no In-Reply-To: Your message of "Sun, 2 Jan 2000 12:20:34 -0500" References: X-Mailer: Mew version 1.05+ on Emacs 19.34.2 Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Date: Sun, 02 Jan 2000 19:04:58 +0100 Message-ID: <50873.946836298@verdi.nethelp.no> Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > We've all lived with the deficiencies of the ssh1 protocol for several > years now, and my guess is that we could live a few more months with it > to see if openSSH gets something closer to the version 2 protocol working. > I have a much bigger problem trying to interrupt a flood of output to my > ssh session (due to cat-ing the wrong file, for instance), then I have > with malicious interceptors trying playback attacks (or any other kind > of attacks). A control-channel for interrupts would be of much more > practical benefit to me. Agreed. > I am also uneasy about a fork at this time because I use ssh on multiple > platforms. I do understand that your change is backward-compatible, > but what good is an improvement which only happens between a half-dozen > freebsd boxes I have, if it isn't going to be on the 300-400 aix, irix, > and solaris boxes which is where I'm making most of my connections to? > I have some optimism that the OpenSSH project will track cross-platform > issues (maybe not "supreme confidence", but "optimism"). If freebsd is > going to fork so soon, is it also going to track cross-platform issues? > My guess is "they won't be a priority". These thoughts echo my own pretty well. I use SSH on a lot of machines and platforms - and I can safely say that a FreeBSD-specific version would *not* be used (this despite FreeBSD being my preferred platform). Interoperability, plus having the same features on all platforms, are the important points here. Steinar Haug, Nethelp consulting, sthaug@nethelp.no To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message