FYI: SSH1 now disabled at compile-time by default

Damien Miller djm at mindrot.org
Wed Mar 25 18:48:41 AEDT 2015


On Tue, 24 Mar 2015, Dan Kaminsky wrote:

BTW you didn't respond to this. IMO it is the essence of the problem:

> > At this point, I don't think any further discussion is going to
> > make any difference. Do you think another two years would make an
> > appreciable change to the numbers you posted above, beyond old
> > hardware literally dying of old age?

Our ability to influence people who run truly obsolete software is
extremely limited. The best we can do is deprecate as noisily as
possible after extremely generous grace period. This is what we are
doing

-d


More information about the openssh-unix-dev mailing list