oss-sec mailing list archives
Re: OpenSSH key blacklisting
From: Sebastian Krahmer <krahmer () suse de>
Date: Wed, 28 May 2008 16:26:07 +0200
Hi, Last time I looked at the drafts (now RFC) there was no spec for revoking user-keys. However it allows x509 certificates for hostkeys. Its all about the RFCs. OpenSSH folks shouldnt implement proprietary stuff :) At the end of the day SSH is not really a PKI system. The focus has been on different issues. Sebastian On Wed, May 28, 2008 at 03:03:42PM +0100, Tim Brown wrote:
All, Maybe I've missed something, in which case, shoot me down, but why unlike other services that make use of public key cryptography, does OpenSSH not have use a model which supports proper authorisation and revocation mechanisms? Would this not be an ideal opportunity to implement this? Whilst I think there was a reasonable case for such features prior to the Debian OpenSSL vulnerability being identified, I would argue that this issue highlights the case. Comercial SSH already has such functionality - can anyone offer a view on how [well] it works? Tim -- Tim Brown <mailto:timb () nth-dimension org uk> <http://www.nth-dimension.org.uk/>
-- ~ ~ perl self.pl ~ $_='print"\$_=\47$_\47;eval"';eval ~ krahmer () suse de - SuSE Security Team ~ SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg)
Current thread:
- Re: OpenSSH key blacklisting, (continued)
- Re: OpenSSH key blacklisting Solar Designer (May 17)
- Re: OpenSSH key blacklisting Kees Cook (May 18)
- Re: OpenSSH key blacklisting Solar Designer (May 18)
- Re: OpenSSH key blacklisting Kees Cook (May 19)
- Re: OpenSSH key blacklisting Kees Cook (May 19)
- Re: OpenSSH key blacklisting Kees Cook (May 18)
- Re: OpenSSH key blacklisting Matthias Andree (May 20)
- Re: OpenSSH key blacklisting Solar Designer (May 27)
- Re: OpenSSH key blacklisting Dmitry V. Levin (May 27)
- Re: OpenSSH key blacklisting Tim Brown (May 28)
- Re: OpenSSH key blacklisting Sebastian Krahmer (May 28)
- Re: OpenSSH key blacklisting Tim Brown (Jun 02)
- Re: OpenSSH key blacklisting Sebastian Krahmer (Jun 02)
- Re: OpenSSH key blacklisting Nathanael Hoyle (Jun 04)
- Re: OpenSSH key blacklisting The Fungi (Jun 04)
- Re: OpenSSH key blacklisting Nathanael Hoyle (Jun 04)
- Re: OpenSSH key blacklisting Jonathan Smith (Jun 04)
- Re: OpenSSH key blacklisting Nathanael Hoyle (May 28)
- Re: OpenSSH key blacklisting Florian Weimer (May 28)
- Re: OpenSSH key blacklisting Mike Frysinger (May 31)