openssh bugs - Nov 2003 - [Bug 764] fully remove product and version information

http://bugzilla.mindrot.org/show_bug.cgi?id=764

           Summary: fully remove product and version information
           Product: Portable OpenSSH
           Version: 3.7.1p1
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: P2
         Component: sshd
        AssignedTo: openssh-bugs at mindrot.org
        ReportedBy: floeff at arcor.de


I would like to see an option in the configuration files to fully remove product
and version information from the server's protocol.

It is part of my security concept to NOT show anything like that to outside
users.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=764





------- Additional Comments From markus at openbsd.org  2003-11-25 09:05 -------
we cannot remove this, because it causes interoperability problems
with older software (this breaks bug-detection).

we might reconsider this if we've fixed all major protocol bugs
(e.g. when the protocol is stable).





------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=764





------- Additional Comments From floeff at arcor.de  2003-11-25 09:07 -------
Okay, sounds reasonable.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.