From owner-freebsd-security  Fri Jul  5 10:55:25 2002
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 865F237B400; Fri,  5 Jul 2002 10:55:22 -0700 (PDT)
Received: from postal1.es.net (postal1.es.net [198.128.3.205])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id CEE9A43E42; Fri,  5 Jul 2002 10:55:21 -0700 (PDT)
	(envelope-from oberman@es.net)
Received: from ptavv.es.net ([198.128.4.29])
        by postal1.es.net (Postal Node 1) with ESMTP id GQF37091;
        Fri, 05 Jul 2002 10:54:00 -0700
Received: from ptavv (localhost [127.0.0.1])
	by ptavv.es.net (Postfix) with ESMTP
	id B31B95D03; Fri,  5 Jul 2002 10:55:19 -0700 (PDT)
To: Dag-Erling Smorgrav <des@ofug.org>
Cc: Mike Tancsa <mike@sentex.net>, Ruslan Ermilov <ru@FreeBSD.ORG>,
	security@freebsd.org
Subject: Re: Default ssh protocol in -STABLE [was: HEADS UP: FreeBSD-STABLE now has OpenSSH 3.4p1] 
In-reply-to: Your message of "05 Jul 2002 13:45:56 +0200."
             <xzphejepfd7.fsf_-_@flood.ping.uio.no> 
Date: Fri, 05 Jul 2002 10:55:19 -0700
From: "Kevin Oberman" <oberman@es.net>
Message-Id: <20020705175519.B31B95D03@ptavv.es.net>
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

> From: Dag-Erling Smorgrav <des@ofug.org>
> Date: 05 Jul 2002 13:45:56 +0200
> Sender: owner-freebsd-stable@FreeBSD.ORG
> 
> [moving from -stable to -security, bcc: to -stable and security-team]
> 
> Mike Tancsa <mike@sentex.net> writes:
> > As a lot has changed with OpenSSH in FreeBSD, perhaps now is a good
> > time to make the 2,1 the default instead ?
> 
> I'd like that.  I think the only reason for the old default was not to
> surprise users who had the ssh1 RSA host key in their known_hosts but
> not the ssh2 DSA host key.
> 
> What do people think about this?  Keep 2,1 or revert to 1,2?

Keep 2,1. It's the best for many reasons and it's about time to live
with a bit of astonishment. It should be added to UPDATING,
though. (Let's keep the astonishment to a minimum.

FWIW, I changed my systems to 2,1 at least 4 months ago.

R. Kevin Oberman, Network Engineer
Energy Sciences Network (ESnet)
Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab)
E-mail: oberman@es.net			Phone: +1 510 486-8634

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message