search for: requiresshconnectioncooki

Displaying 1 result from an estimated 1 matches for "requiresshconnectioncooki".

2003 Oct 12
0
idea (and patch): connection cookies
...ction cookie is transmitted unencrypted, this extension offers no extra protection against attackers who are able to packet sniff legitimate sessions. (very rough) Specification ========================== An ssh server configured to require a connection cookie must prefix the 28-byte string "RequireSSHConnectionCookie\r\n" to its ident string. An ssh client configured to send connection cookies must do so only if it sees this extra line from the server. The client should then prepend the 3-byte string "CC:" followed by the 32-byte connection cookie to its own version string. All 32 bytes of th...