Firewall Wizards mailing list archives

Re: SSH question


From: Kevin Steves <stevesk () sweden hp com>
Date: Sat, 11 Apr 1998 08:09:51 +0200

Adam Shostack wrote:
And SSH can be tunneled via most companies' SSL
'proxies.'

Exactly, and that's because most "SSL" proxies know nothing about
the SSL protocol; they just use the HTTP CONNECT extension method
to build an HTTP-based circuit gateway, or use some other circuit
mechanism (e.g., Raptor's older httpd doing transparent relaying
on 443/tcp).

Kevin



Current thread: