https://bugzilla.mindrot.org/show_bug.cgi?id=3439

--- Comment #4 from tar.ancalime.nume...@gmail.com ---
Hey Darren.

Just one question on this:

In both cases, the prompt with password and the prefix with
keyboard-interactive, are these generated by the ssh client?

Cause if e.g. the server could control the full prompt, a hostile
server could try tricking people into entering passphrases/TOTPs for
another server.

Thanks :-)

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
openssh-bugs@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-bugs

Reply via email to