please remove permission check that disallows private-group access.

Blumenthal, Uri - 0553 - MITLL uri at ll.mit.edu
Tue Oct 23 08:06:27 AEDT 2018


    Damien Miller <djm at mindrot.org> writes:
    > We don't plan to remove this check. Accidental key exposure is still an
    > unfortunately common problem and, 

Could you please explain where you got this data from? I'd like a reference, please.

    > while this check isn't perfect, I'm
    > pretty sure that it avoids enough real-world misconfiguration to
    > justify it's continued existence.

If this check "while not perfect ... avoids real-world misconfiguration", why is there "accidental key exposure"?

Is there a contradiction?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5249 bytes
Desc: not available
URL: <http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20181022/1fe9b827/attachment.p7s>


More information about the openssh-unix-dev mailing list