Re: SSH 1 Why?

[E.Kollof () IND TNO NL (Emiel Kollof)]

Emiliano Kargieman wrote:
> What you are missing is the following: upgrading to SSH 2 implies upgrading to
> version 2 of the protocol, in order to prevent the abovementioned problem you
> can no longer support compatibility with version 1.x of the protocol. So you
> have to update all your SSH servers and clients.

Not true. If you have ssh1 installed, and you compile ssh2, ssh2
maintains version1 protocol compatibility, which means you can still
connect to a ssh2 sshd with a ssh1 client.

> In the real world (somewhere around here?) updating all this clients takes can
> take a long time, so even if you are upgrading to version 2 you need to keep
> backwards compatibility for a while... that means, any problems found in SSH 1
> still concern a lot of people (see the short answer for details).

This might be a valid point. But upgrading *all* clients to ssh2 is not
nessesary. You can still maintain ssh1 compatibility.

Cheers,
Emiel