Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 27 Sep 2001 19:57:23 -0700
From:      Kris Kennaway <kris@obsecurity.org>
To:        ann kok <annkok2001@yahoo.com>
Cc:        "freebsd-questions@FreeBSD.ORG" <freebsd-questions@FreeBSD.ORG>
Subject:   Re: ssh1
Message-ID:  <20010927195723.B4627@xor.obsecurity.org>
In-Reply-To: <20010928015159.74946.qmail@web20109.mail.yahoo.com>; from annkok2001@yahoo.com on Thu, Sep 27, 2001 at 06:51:59PM -0700
References:  <20010928015159.74946.qmail@web20109.mail.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help

--E39vaYmALEf/7YXx
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Sep 27, 2001 at 06:51:59PM -0700, ann kok wrote:
> Hi all
>=20
> I heard that ssh1 is not secure.
> Is it true and why?

The ssh1 protocol is badly designed and has some security flaws which
can be partially worked around, but not solved.  These flaws were
fixed in the ssh2 protocol, as well as other changes which make the
protocol more extensible, etc.

> In fact, what is the different between ssh2, ssh1 and
> openssh?

ssh2 and ssh1 are names of protocols (well, the commonly used names -
the ssh1 protocol isn't standardized anywhere, and the ssh2 protocol
is described by the SecSH RFC), openssh is an implementation of both
of these protocols.  There are also ssh1/ssh2 protocol implementations
which historically were the only available UNIX implementations, which
are also sometimes referred to as ssh1/ssh2.

Kris

--E39vaYmALEf/7YXx
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE7s+cTWry0BWjoQKURAgNiAKDuJeEEAd7TlirqEsFmIbSCwd0rmwCgvTEC
qyIY0QNAZpK013S+dHhLOLc=
=u/TT
-----END PGP SIGNATURE-----

--E39vaYmALEf/7YXx--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010927195723.B4627>