From owner-freebsd-hackers Sat Dec 23 1:59:40 2000 From owner-freebsd-hackers@FreeBSD.ORG Sat Dec 23 01:59:38 2000 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from spammie.svbug.com (unknown [198.79.110.2]) by hub.freebsd.org (Postfix) with ESMTP id 3049437B400 for ; Sat, 23 Dec 2000 01:59:38 -0800 (PST) Received: from spammie.svbug.com (localhost.mozie.org [127.0.0.1]) by spammie.svbug.com (8.9.3/8.9.3) with ESMTP id CAA21431; Sat, 23 Dec 2000 02:00:55 -0800 (PST) (envelope-from jessem@spammie.svbug.com) Message-Id: <200012231000.CAA21431@spammie.svbug.com> Date: Sat, 23 Dec 2000 02:00:54 -0800 (PST) From: opentrax@email.com Reply-To: opentrax@email.com Subject: Re: ssh - are you nuts?!? To: dan@langille.org Cc: davep@afterswish.com, freebsd-hackers@FreeBSD.ORG In-Reply-To: <200012230032.NAA13382@ducky.nz.freebsd.org> MIME-Version: 1.0 Content-Type: TEXT/plain; charset=us-ascii Sender: jessem@spammie.svbug.com Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On 23 Dec, Dan Langille wrote: > On 23 Dec 2000, at 13:25, David Preece wrote: > >> At 15:37 22/12/00 -0800, you wrote: >> >> >The question asked is: why you believe ssh is beter >> >than say telnet. Or what advantages SSH has in general. >> >> Sorry, don't have time to reply to this properly. >> >> The main evil of ssh is that server authentication is not enforced, making >> mounting a man-in-the-middle attack basically trivial. > > It is possible. It is not trivial. > What leads you to believe that it's not trival? To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message