[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] FIX - can't su to root, email stopped working, gui stopped working, postgres database is down, virtual sites disappeared



On Mon, 04 Mar 2002, Jay Summers wrote:
> > Gerald, you are correct.  FTP can be reconfigured to allow root logins, but
> > that's totally independent from the SSH config file.  Incidentally, I
> > generally consider the fact that the openssh PKG allows root login by
> > default to be a feature, not a hole.  I do consider the fact that it allows
> > SSH protocol 1 traffic by default to be a hole though and I plug that
> > immediately after an install.  My 2 cents.
> 
> Correct me if I'm wrong, but I don't think the SSH1 protocol is anymore
> unsafe than SSH2 as long as it's the latest stable/secure release. I don't
> really have any links to back up my claim but I believe that I read this
> somewhere before. Maybe even this list...

I am subscribed to the ssh list and most people on the list seem to think that
SSH1 is not secure [enough]

 --
Gerald Waugh