GSSAPI Key Exchange

Simon Wilkinson sxw at
Sat May 6 20:18:29 EST 2006

Now that RFC 4462 has been published, I was wondering if there would be 
any interest in looking again at integrating the key exchange portions of 
my GSSAPI patch into the OpenSSH tree?

As I've mentioned before, key exchange has significant benefits for large 
sites as it allows them to use Kerberos to authenticate ssh hosts, and 
removes the need to maintain and distribute ssh known_hosts files. Many 
vendors are already shipping patched versions of OpenSSH with GSSAPI key 
exchange support.



More information about the openssh-unix-dev mailing list