On Sun, Dec 19, 1999 at 04:31:13PM -0500, Shane Owenby wrote:
> Snip...I am surprised the OpenSSH hasn't come up in this thread.
> OpenSSH wasn't effected by the recent RSAREF fiasco, and it is
> completely legal for use in the US (as no patented algorithms are
> being supported).
>
> www.openssh.org
>
> Shane Owenby
> IBM Linux Technology Center
Indeed, I'd prefer people use OpenSSH since:
1. It's open source, unlike the current versions of SSH 1.2.x (and SSH
2.x for that matter)
2. It was coded by the OpenBSD guys and ships as part of OpenBSD. They started
out from a free version of SSH (version 1.1.12 or something) and brought it up
to scratch, fixing bugs and security holes in the process. In terms of security,
there's little that comes close to OpenBSD, both in the commercial and free worlds.
3. A linux port exists, and the author of the port even has RPMs available. The
linux port also has some additional features, such as PAM support.
I suggest that Mandrake starts referring people to OpenSSH rather than SSH
1.2.x. What do you all think?
Salim
