[Bug 2888] Consider adding other compression schemes (lz4, zstd)

[bugzilla-daemon at mindrot.org]

https://bugzilla.mindrot.org/show_bug.cgi?id=2888

--- Comment #16 from Darren Tucker <dtucker at dtucker.net> ---
(In reply to Paul Szabo from comment #15)
[...]
> The right fix would be to implement compression at the channel
> level, replacing the global one at the transport level.

That is true but it does not exist in the current protocol.  As it says
in that thread, Damien has even looked into prototyping it, but found
it to be non-trivial:
https://mailarchive.ietf.org/arch/msg/ssh/sdzN77qtuwaNBdfKD7iigsyhm2k/.

> Removing functionality should not be the response to percieved
> security issues: why not just drop SSH altogether?

Given it's called "Secure Shell" and not "Compressed Shell" you should
expect us to continue to err on the side of security.

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.