Date: Fri, 05 Jul 2002 20:48:15 -0600 From: Brett Glass <brett@lariat.org> To: thomas@cuivre.fr.eu.org, Dag-Erling Smorgrav <des@ofug.org> Cc: Mike Tancsa <mike@sentex.net>, Ruslan Ermilov <ru@FreeBSD.ORG>, security@FreeBSD.ORG Subject: Re: Default ssh protocol in -STABLE [was: HEADS UP: FreeBSD-STABLE now has OpenSSH 3.4p1] Message-ID: <4.3.2.7.2.20020705204451.02607930@localhost> In-Reply-To: <20020705134934.A40046@melusine.cuivre.fr.eu.org> References: <xzphejepfd7.fsf_-_@flood.ping.uio.no> <20020705073634.GA64656@sunbay.com> <20020705073634.GA64656@sunbay.com> <5.1.0.14.0.20020705073043.01c52198@192.168.0.12> <xzphejepfd7.fsf_-_@flood.ping.uio.no>
next in thread | previous in thread | raw e-mail | index | archive | help
At 05:49 AM 7/5/2002, Thomas Quinot wrote: >Since the version change is going to suprise people anyway, I'd say let >us do it all the way and switch to protocol 2,1. It is more than time >to phase out protocol 1. Alas, too many clients use Protocol 1 only. And Protocol 1 really isn't that bad, security-wise! In fact, after the rash of recent bugs in code that's exclusively used by Protocol 2 (with, I suspect, more yet to be found), I've set quite a few servers that really only communicate with Protocol 1 clients to do Protocol 1 only. I may reconsider this move in a year or so, but for now it seems to be the safest way to go. --Brett Glass To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4.3.2.7.2.20020705204451.02607930>