Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 02 May 2001 19:56:08 -0600
From:      Warner Losh <imp@village.org>
To:        Brian Somers <brian@Awfulhak.org>
Cc:        Brian Feldman <green@FreeBSD.org>, cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   Re: cvs commit: src/crypto/openssh sshconnect.c ssh.c ssh.h 
Message-ID:  <200105030156.f431u8l36209@billy-club.village.org>
In-Reply-To: Your message of "Thu, 03 May 2001 01:56:26 BST." <200105030056.f430uQF27068@hak.lan.Awfulhak.org> 
References:  <200105030056.f430uQF27068@hak.lan.Awfulhak.org>  

next in thread | previous in thread | raw e-mail | index | archive | help
In message <200105030056.f430uQF27068@hak.lan.Awfulhak.org> Brian Somers writes:
: Why ?

Because it was badly broken in many ways.  The implementation details
were wrong in a number of small ways, in addition it is legitimate to
have different host keys for the same IP address if you run different
servers on different ports (a common case of this would be for holes
in the firewall where port 22 goes one place, 23 another, etc).  A
common trick is to use the machine name to steer to these different
ports.  Green's changes broke that.

It is unclear which behavior is better or more desriable, but there's
a lot to be said for consistancy with the reference implementation.

Warner

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200105030156.f431u8l36209>