search for: requiresshconnectioncookie

...ction cookie is transmitted unencrypted, this extension offers no extra protection against attackers who are able to packet sniff legitimate sessions. (very rough) Specification ========================== An ssh server configured to require a connection cookie must prefix the 28-byte string "RequireSSHConnectionCookie\r\n" to its ident string. An ssh client configured to send connection cookies must do so only if it sees this extra line from the server. The client should then prepend the 3-byte string "CC:" followed by the 32-byte connection cookie to its own version string. All 32 bytes of the...