openssh unix dev - Sep 2004 - Announce Openssh with telnet

Hi,

I would not consider it a real bug, or security problem, but I wonder, why my 
sshd declares itself when I do a telnet on port 22:


telnet localhost 22
Trying ::1...
Connected to localhost.
Escape character is '^]'.
SSH-1.99-OpenSSH_3.7.1p2


Would it not be better, not to show anything at all, so that someone just 
trying, whats up on port 22 does not see what programm with witch version is 
running ?


mit freundlichen Gr??en

Martin Schmidt

Tel: 09843/988095
Fax: 09843/988096
email: martin.schmidt at jielo.de

Because there are too many bugs in too many servers and the clients need
to know how to work around them.  Along with the fact it tells you if you
can use v1, v2 or either protocal..

If at some point in the future we have a solid RFC and no more changes and
most older stuff goes away (and the RFC lets us) then we can drop it.

- Ben

On Tue, 7 Sep 2004, Martin Schmidt wrote:
> Hi,
>
> I would not consider it a real bug, or security problem, but I wonder, why
my
> sshd declares itself when I do a telnet on port 22:
>
>
> telnet localhost 22
> Trying ::1...
> Connected to localhost.
> Escape character is '^]'.
> SSH-1.99-OpenSSH_3.7.1p2
>
>
> Would it not be better, not to show anything at all, so that someone just
> trying, whats up on port 22 does not see what programm with witch version
is
> running ?
>
>
> mit freundlichen Gr??en
>
> Martin Schmidt
>
> Tel: 09843/988095
> Fax: 09843/988096
> email: martin.schmidt at jielo.de
>
> _______________________________________________
> openssh-unix-dev mailing list
> openssh-unix-dev at mindrot.org
> http://www.mindrot.org/mailman/listinfo/openssh-unix-dev
>

Martin Schmidt wrote:
> Hi,
> 
> I would not consider it a real bug, or security problem, but I wonder, why
my
> sshd declares itself when I do a telnet on port 22:
This has been discussed over a dozen time on this list and in bugzilla.
Please check the archives.

-d