To be fair he's not saying that. He's saying that he's concerned about the increase in complexity of the SSH2 code base. Given that was 4 years ago I'd be surpr

To be fair he's not saying that. He's saying that he's concerned about the increase in complexity of the SSH2 code base. Given that was 4 years ago I'd be surprised if the SSH2 code base hasn't been thoroughly audited by the team. I think it was a valid concern to have if SSH2 hadn't been audited at the time, given that you're trading known issues for an unknown solution that may or may not work, but to infer he thinks SSHv1 is more secure than SSHv2 in that post is slightly inaccurate.