Time to add exponential backoff for SSH interactive login failures?
Jay Libove
libove at felines.org
Fri Dec 17 13:12:30 EST 2004
Ah - very fair. Point taken.
Thanks.
-Jay
-----Original Message-----
From: Rick Jones [mailto:rick.jones2 at hp.com]
Sent: Thursday, December 16, 2004 9:11 PM
To: Jay Libove
Cc: openssh-unix-dev at mindrot.org
Subject: Re: Time to add exponential backoff for SSH interactive login
failures?
Jay Libove wrote:
> I'm accustomed to systems where even the first failed login attempt
> incurs a 5 second delay. I don't think that's too harsh, but everyone
> has their own needs and considerations.
Just to be clear - I wasn't suggesting that there be no delay for the
first three, just that it not increase exponentially for the first
three.
rick jones
More information about the openssh-unix-dev
mailing list