[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] Replacing Telnet with SSH



At 6/20/01 02:46 PM -0700, you wrote:
--- Carrie Bartkowiak <ravencarrie@xxxxxxxx> wrote:
> I'd highly suggest using SSH2 rather than SSH1, it's more
> secure and I think there are exploits running around for
> SSH1 (don't quote me on that, though).

First, SSH1 and SSH2 are both protocols.  SSH applications (clients and
servers such as OpenSSH) are as secure as the last bottle of beer at a
keg-party. (it all depends on which friends are in your house).  To say
that one is more secure (insecure?) than another is not very accurate.

Overall, agreed. However, Carrie is correct in saying that vulnerabilities have been found in the SSH1 protocol. She was indeed speaking of the protocol, not of an application.


--
Rodolfo J. Paiz
rpaiz@xxxxxxxxxxxxxx