News for the lsh-0.1.17 release

        More support for host authentication and SPKI.

        First version that includes Bazsi's work on an ssh-proxy (i.e.
        a program that implements the traditional Man-in-the-middle
        attack on the ssh2 protocol). Could be useful for people
        running firewalls, and also for those of us who want to point
        out that it's a bad idea to use unauthenticated hostkeys.


This release is mostly untested, but contains some new stuff. Try lsh
--sloppy, and then sexp_conv -i advanced < ~/.lsh/captured_keys.

At the usual places,

  http://www.lysator.liu.se/~nisse/archive/lsh-0.1.17.tar.gz
  ftp://ftp.lysator.liu.se/pub/security/lsh/lsh-0.1.17.tar.gz

Happy hacking,
/Niels

Reply via email to