Anti-MITMA method of Samy Kamkar

U.Mutlu um at mutluit.com
Thu Aug 4 09:05:15 EST 2011


Hi, I wonder if OpenSSH has the following method
against MITMA already implemented or not:

"
Anti-MITMA: Preventing Man in the Middle Attacks

Code at http://samy.pl/anti-mitma.pdf
I've described a simple method for authentication based protocols
(e.g., ssh) to prevent man in the middle attacks. Rather than
establishing a potentially MITMA'd connection, then authenticating,
you can authenticate the initial key exchange. More details in the pdf.
posted on october 15, 2009
"
(Found at http://samy.pl/code/ )


More information about the openssh-unix-dev mailing list