4 ms·
Interesting! Is there anywhere a discussion around their refusal to include your fix?
by gspr 7mo ago
Interesting! Is there anywhere a discussion around their refusal to include your fix?
- rnhmjoj 7mo agoSee this, for example: https://groups.google.com/g/opensshunixdev/c/FVv_bK16ADM/m/R3zAt7RWAAAJ https://groups.google.com/g/opensshunixdev/c/FVv_bK16ADM/m/R... It boilds down to using a Linux-specific API, though it's really BSD that is lacking support for a standard (RFC 5014).
- lxgr 7mo agoIt would also seem to break address privacy (usually not much of a concern if you authenticate yourself via SSH anyway, but still, it leaks your Ethernet or Wi-Fi interface's MAC address in many older setups).
- rnhmjoj 7mo agoWell, yss, but SSH is hardly ever anonymous and this could simply be a cli option.
- lxgr 7mo agoNot anonymous, but it's pretty unexpected for different servers with potentially different identities for each to learn your MAC address (if you're using the default EUI-64 method for SLAAC).
- gspr 7mo agoThis is a good argument for not making it the default, but it would be nice to have it as a command line switch.