On Thu, 01 Feb 2001, Damien Miller wrote:
> Use SSH2 protocol and public key authentication. It does not use passwords
> and is safe against man-in-the-middle attacks.

Out of curiosity... does anyone have a concise summary of issues
around an open source implementation of the SSH2 protocol?

thanks,
--dr

-- 
Dragos Ruiu <drdursec.com>   dursec.com ltd. / kyx.net - we're from the future 
gpg/pgp key on file at wwwkeys.pgp.net or at http://dursec.com/drkey.asc
                                                                    http://cansecwest.com
CanSecWest/core01: March 28-30, Vancouver B.C.  ------------^
Speakers: Renaud Deraison/Nessus Attack Scanner, Martin Roesch/Snort/Advanced IDS,
  Ron Gula/Enterasys/Strategic IDS, Dug Song/Arbor Networks/Monkey in the Middle,
  RFP/Whisker2.0 and other fun, Mixter/2XS/Distributed Apps, Theo DeRaadt/OpenBSD,
  K2/w00w00/ADMutate, HD Moore/Digital Defense/Making NT Bleed, Frank Heidt/Stake, 
  Matthew Franz/Cisco/Trinux/Security Models, Fyodor/insecure.org/Packet Reconaissance,
  Lance Spitzner/Sun/Honeynet Fun, Robert Graham/NetworkICE/IDS Technology Demo,
  Kurt Seifried/SecurityPortal/Crypto: 2-Edged Sword, Dave Dittrich/UW/Forensics,   
  Sebastien Lacoste-Seris & Nicolas Fischbach/COLT Telecom/Securite.Org/Kerberized
  SSH Deployment, Jay Beale/MandrakeSoft/Bastille-Linux/Securing Linux

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]