search for: understab

...s, or clients that can't use strong encryption). This would probably require a minor change in the protocol that could still operate in a backwards compatible fashion. I think that this protection is important for the future of SSH, as there appears to be no inexpensive, standard, simple, and understabable PKI implimentation on the horizon. Because of this, people are going to continue using passwords, at least with this reletivly minor enhancement, their securiy is brought back to that of the password and not that of the network during initial connect. Any comments? (is this a new idea?)