FYI: SSH1 now disabled at compile-time by default

Damien Miller djm at mindrot.org
Wed Mar 25 12:31:42 AEDT 2015


On Tue, 24 Mar 2015, Dan Kaminsky wrote:

> Hmm.  Feels a little aggressive for ssh client.  Support heartily for sshd.

People who need it can build their own, or OS vendors might supply a
non-default v.1 capable client binary themselves.

IMO it's time to apply some selection pressure to a protocol that can't
be secured.

-d


More information about the openssh-unix-dev mailing list