[Bug 764] fully remove product and version information

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Tue Nov 11 13:27:14 EST 2008


https://bugzilla.mindrot.org/show_bug.cgi?id=764


Anton <anton.bugs at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |anton.bugs at gmail.com




--- Comment #19 from Anton <anton.bugs at gmail.com>  2008-11-11 13:27:14 ---
> Mass update RESOLVED->CLOSED after release of openssh-5.1

Does this mean you are going to fix it soon?

May I suggest give user a freedom to choose similar to apache:
 ServerTokens {Full|Minimal|Prod}

which would generate something like:
 Full:    SSH-2.0-OpenSSH_5.1
 Minimal: SSH-2.0
 Prod:    SSH-2.0-OpenSSH

or whatever, which would not case any interoperability problems
mentioned in comment #1 and yet, could help in hardening openssh
server?

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list