Key Pair Conversion Openssh => SSH2

Dan Kaminsky dan at doxpara.com
Sat Mar 16 02:01:08 EST 2002


Oops, didn't finish that sentence.

Q:  Why no secsh key format throughout openssh?
A:

The short version:

Our standard came first(and from Tatu!), their standard is one broken thing
from a series of
broken things, and the solution to the very, very real problem of users
being unable to make remote servers integrate their local pubkeys into their
authentication subsystems *isn't* to standardize on some file format but
rather to make key exchange an integral part of the protocol.

Using file operations to control a network protocol is incorrect,
inconsistent, and perhaps even generally wrong.

Yours Truly,

    Dan Kaminsky
    DoxPara Research
    http://www.doxpara.com






More information about the openssh-unix-dev mailing list