Home page logo

bugtraq logo Bugtraq mailing list archives

Re: SSH 1 Why?
From: E.Kollof () IND TNO NL (Emiel Kollof)
Date: Wed, 15 Dec 1999 13:39:13 +0100

Emiliano Kargieman wrote:

What you are missing is the following: upgrading to SSH 2 implies upgrading to
version 2 of the protocol, in order to prevent the abovementioned problem you
can no longer support compatibility with version 1.x of the protocol. So you
have to update all your SSH servers and clients.

Not true. If you have ssh1 installed, and you compile ssh2, ssh2
maintains version1 protocol compatibility, which means you can still
connect to a ssh2 sshd with a ssh1 client.

In the real world (somewhere around here?) updating all this clients takes can
take a long time, so even if you are upgrading to version 2 you need to keep
backwards compatibility for a while... that means, any problems found in SSH 1
still concern a lot of people (see the short answer for details).

This might be a valid point. But upgrading *all* clients to ssh2 is not
nessesary. You can still maintain ssh1 compatibility.


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]