3 ms·
It is funny, but Theo (OpenSSH leader developer) thinks that SSHv1 is more secure than v2: http://www.ossec.net/dcid/?p=10 http://www.ossec.net/dcid/?p=10
by sucuri2 16y ago
It is funny, but Theo (OpenSSH leader developer) thinks that SSHv1 is more secure than v2:
http://www.ossec.net/dcid/?p=10 http://www.ossec.net/dcid/?p=10
- iuguy 16y agoTo be fair he's not saying that. He's saying that he's concerned about the increase in complexity of the SSH2 code base. Given that was 4 years ago I'd be surprised if the SSH2 code base hasn't been thoroughly audited by the team. I think it was a valid concern to have if SSH2 hadn't been audited at the time, given that you're trading known issues for an unknown solution that may or may not work, but to infer he thinks SSHv1 is more secure than SSHv2 in that post is slightly inaccurate.