ssh(d) identification string in portable (clarification)

[Darren Tucker]

On Tue, Aug 9, 2016 at 7:21 AM, Daniel Kahn Gillmor
<dkg at fifthhorseman.net> wrote:
[...]
> That seems like a pretty clear intent.  (and fwiw, i think it's the
> right thing to do)

There is the VersionAddendum sshd_config option however it prepends a
space.  Perhaps it shouldn't, and anything that actually wants the
space can supply that itself (ie 'VersionAddendum p2' vs
'VersionAddendum
" someotherstring"').

IMO a security tool taking the over-the-wire banner as the
authoritative test about whether a problem does or does not exist
isn't wise.

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 11EAA6FA / A86E 3E07 5B19 5880 E860  37F4 9357 ECEF 11EA A6FA (new)
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.