3 ms·

Older clients may be a target for attack then.

• pavon 3y ago
  Yes, but I'd be much more concerned about the SSH server.
  • px43 3y ago
    I dunno, exploiting a vulnerability that lets you steal SSH keys from a sysadmin seems a bit more useful than hitting a single server.
    • NegativeK 3y ago
      As usual, it seems like it's a good idea for the open source project (ssh in this case) to drop old tech and move on while those dependent on it should maintain it, for whatever that means.
• Piskvorrr 3y ago
  Possibly. You don't want to use the older client for anything except connecting to the older system. Keep it somewhere offline (encrypted, whatever: distinctly non-executable), too. (Not that it would solve the issue altogether, see Stuxnet for a sufficiently motivated attacker and airgapped systems, but it's a viable mitigation.)