Re: ssh protocol version 1 and 2 allowed?

[tedu <grendel@zeitbombe.org>]

"Toni Mueller" <openbsd-misc@oeko.net> wrote:

> > >The real problems with v1 have been corrected, as in deattack.c. 
> 
> so you say that using v1 is mostly safe (enough) now, not that much
> better than using v2?

It's good enough for me.  Do your own risk assessment.  In my situation
I need to have v1 enabled, because otherwise I couldn't login from a
large base of v1-only clients.

> Hmmm. A few months ago I switched everything to a recent OpenSSH and
> then everything to v2 only. Esp. when there were rumours that having
> v1 enabled should make the server suspectible to attacks w/o MITM.

I've heard some rumors recently about a root exploit that works against
v2 servers.  



-- 
Don't be humble; you're not that great.