zlib compression, the exploit, and OpenSSH

[Markus Friedl]

On Wed, Mar 13, 2002 at 12:07:34PM -0800, ewheeler at kaico.com wrote:
> 2.  What are the logistics of moving all non-critical external library
> calls (zlib in this case, but others if they exist) *after*
> authentication?

this would only work if we disallowed compression
until after authentication and start to rekey
after successful authentication.