Re: Suggested way to ssh into obsolete devices (with old ssh crypto)?

From	Stefan Monnier <monnier@iro.umontreal.ca>
Newsgroups	linux.debian.user
Subject	Re: Suggested way to ssh into obsolete devices (with old ssh crypto)?
Date	2021-07-07 05:10 +0200
Message-ID	<Cy66J-4q8-3@gated-at.bofh.it> (permalink)
References	(6 earlier) <CxXG9-7Tg-1@gated-at.bofh.it> <CxXPP-7Ww-1@gated-at.bofh.it> <CxZHX-AE-1@gated-at.bofh.it> <Cy0Xo-1el-9@gated-at.bofh.it> <Cy1gK-1kK-5@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

> I'm aware of that. My critique was specific to the "we take it out
> because it's dangerous to the user" part.

That's often an explanation but not the main motivation.
For the `none` cipher, I think it was, tho.

IIRC the problem was that using the `none` cipher causes the
authentication to be exposed in a way that is worse than using Telnet:
with Telnet you only expose the data you send to the wire, whereas with
SSH's `none` cipher you ended up exposing the data plus your
(valued) credentials.

> I'm torn on this one... Sometimes I've the impression that this leads to
> asocial software (i.e. nobody goes to any effort to make their software
> compatible to reasonable ranges of library (and other dependencies's)
> versions).
> Akin to the Flatpaks and Snaps of this world, perhaps with a less horrible
> dependencies management story).

Indeed, it has its downsides.


        Stefan

Thread

Suggested way to ssh into obsolete devices (with old ssh crypto)? Ralph Aichinger <ra@pi.h5.or.at> - 2021-07-06 11:10 +0200
  Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? "Andrew M.A. Cater" <amacater@einval.com> - 2021-07-06 11:30 +0200
  Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Roberto C. Sánchez <roberto@debian.org> - 2021-07-06 15:00 +0200
    Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Stefan Monnier <monnier@iro.umontreal.ca> - 2021-07-06 18:10 +0200
      Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? "Andrew M.A. Cater" <amacater@einval.com> - 2021-07-06 18:40 +0200
        Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Stefan Monnier <monnier@iro.umontreal.ca> - 2021-07-06 19:10 +0200
          Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Michael Stone <mstone@debian.org> - 2021-07-06 19:50 +0200
            Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? <tomas@tuxteam.de> - 2021-07-06 20:10 +0200
              Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Michael Stone <mstone@debian.org> - 2021-07-06 20:20 +0200
                Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Roberto C. Sánchez <roberto@debian.org> - 2021-07-06 20:20 +0200
                Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Michael Stone <mstone@debian.org> - 2021-07-06 20:40 +0200
                Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? <tomas@tuxteam.de> - 2021-07-06 22:20 +0200
                Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Michael Stone <mstone@debian.org> - 2021-07-06 22:50 +0200
                Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? <tomas@tuxteam.de> - 2021-07-06 23:50 +0200
                Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Stefan Monnier <monnier@iro.umontreal.ca> - 2021-07-06 23:40 +0200
                Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? <tomas@tuxteam.de> - 2021-07-07 00:00 +0200
                Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Stefan Monnier <monnier@iro.umontreal.ca> - 2021-07-07 05:10 +0200
                Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? <tomas@tuxteam.de> - 2021-07-07 10:00 +0200
                Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Karen Lewellen <klewellen@shellworld.net> - 2021-07-07 00:00 +0200
            Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Stefan Monnier <monnier@iro.umontreal.ca> - 2021-07-06 21:30 +0200
              Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Michael Stone <mstone@debian.org> - 2021-07-06 21:30 +0200
  Re: Suggested way to ssh into obsolete devices (with old ssh crypto)? Lee <ler762@gmail.com> - 2021-07-07 01:20 +0200

csiph-web