hello, On Wed, 21 Jan 2004, Colin Watson wrote: | > another thing: enabling both protocols at once of course increases the | > "area" of the potentially vulnerable protocol interface. if the user | > requires the use of v1 for compatibility, there should be an option | > to enable v1 only. | | There is; it's just not presented by debconf. Not all of OpenSSH's | configuration options are - nor should be - presented by debconf.
i guess i was trying to say that the two sensible options presented by debconf would be "allow protocol 2 only" and "allow protocol 1 only". all clients i know of can speak v1 too. -- erno
