ssh(d) identification string in portable (clarification)

Darren Tucker dtucker at
Tue Aug 9 09:50:04 AEST 2016

On Tue, Aug 9, 2016 at 7:21 AM, Daniel Kahn Gillmor
<dkg at> wrote:
> That seems like a pretty clear intent.  (and fwiw, i think it's the
> right thing to do)

There is the VersionAddendum sshd_config option however it prepends a
space.  Perhaps it shouldn't, and anything that actually wants the
space can supply that itself (ie 'VersionAddendum p2' vs
" someotherstring"').

IMO a security tool taking the over-the-wire banner as the
authoritative test about whether a problem does or does not exist
isn't wise.

Darren Tucker (dtucker at
GPG key 11EAA6FA / A86E 3E07 5B19 5880 E860  37F4 9357 ECEF 11EA A6FA (new)
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

More information about the openssh-unix-dev mailing list