Time to add exponential backoff for SSH interactive login failures?

Jay Libove libove at felines.org
Fri Dec 17 13:12:30 EST 2004


Ah - very fair. Point taken.
Thanks.
-Jay

-----Original Message-----
From: Rick Jones [mailto:rick.jones2 at hp.com] 
Sent: Thursday, December 16, 2004 9:11 PM
To: Jay Libove
Cc: openssh-unix-dev at mindrot.org
Subject: Re: Time to add exponential backoff for SSH interactive login
failures?

Jay Libove wrote:
> I'm accustomed to systems where even the first failed login attempt
> incurs a 5 second delay.  I don't think that's too harsh, but everyone
> has their own needs and considerations.  

Just to be clear - I wasn't suggesting that there be no delay for the 
first three, just that it not increase exponentially for the first
three.

rick jones





More information about the openssh-unix-dev mailing list