Is there an independent web site where strengths and deficiencies between
ssh1 ssh2 and openssh are compared?
If someone knows of a url could they please post it? I have significant
knowledge on the network side but not much concerning encryption itself.
Are the weaknesses connection related or crypto in nature?
TIA,
Will Flagg
On Tue, 28 Mar 2000, Tatu Ylonen wrote:
> > i suggest using OpenSSH instead, which has krb4/AFS support integrated,
> > and is more actively maintained. see http://www.openssh.com/
>
> I really do not recommend using OpenSSH (or any SSH1 implementation
> for that matter).
>
> Please note that there have been serious security problems in SSH1
> (and OpenSSH) kerberos support. I'm not fully up to date on whether
> they have been fixed.
>
> Tatu
>
> --
> SSH Communications Security http://www.ssh.com/
> SSH IPSEC Toolkit http://www.ipsec.com/
> SSH Secure Shell http://www.ssh.com/ssh
>
"They that can give up essential liberty to obtain a
little temporary safety deserve neither liberty nor
safety." Ben Franklin (1759)
"The American people must be willing to give up a
degree of personal privacy in exchange for safety
and security." FBI Director Louis Freeh (1993)
-- from the 24OCT94 National Review
