Re: Generic challenge-repsonse aunetication in ssh2

[Chris Newman]

On Mon, 8 Feb 1999, Martin Forssen wrote:
> I am not really sure that is a good idea since the conditions are quite
> different. The draft mentioned above is quite concerned with protecting
> the authentication data while on the wire whereas in ssh we already have a
> secure channel when authenticating.

Fair enough.  I didn't say it should be identical, but it'd be a lot
better if whatever mechanism is used in SSH can share the same format for
the predigested password verifiers on the server end.  FYI, there appears
to be a good chance that DIGEST-MD5 will have OS support in Windows 2000.
It's certainly nice to be able to use the OS password services rather than
rolling your own.

                - Chris