bugzilla-daemon at bugzilla.mindrot.org
2008-Nov-11 02:27 UTC
[Bug 764] fully remove product and version information
https://bugzilla.mindrot.org/show_bug.cgi?id=764
Anton <anton.bugs at gmail.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |anton.bugs at gmail.com
--- Comment #19 from Anton <anton.bugs at gmail.com> 2008-11-11 13:27:14
---> Mass update RESOLVED->CLOSED after release of openssh-5.1
Does this mean you are going to fix it soon?
May I suggest give user a freedom to choose similar to apache:
ServerTokens {Full|Minimal|Prod}
which would generate something like:
Full: SSH-2.0-OpenSSH_5.1
Minimal: SSH-2.0
Prod: SSH-2.0-OpenSSH
or whatever, which would not case any interoperability problems
mentioned in comment #1 and yet, could help in hardening openssh
server?
--
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching someone on the CC list of the bug.