Secure Shell FAQ Section 1: About Secure Shell: "The SSH1 protocol is not being developed anymore, as SSH2 is being developed as the standard. Even if you are not using SSH2, many folks are establishing a path towards it. With three implementations (and growing) of SSH2 currently in the works, there is growing support (especially with the SSH2 protocol in IETF draft). However, there are arguments for and against running SSH1.
Note: If you have any additional arguments either way, I'll post them. -AC
There are structural weaknesses in SSH1 which leave it open to additional attacks
SSH1 is subject to a man-in-the-middle attack
SSH1 has more supported platforms
SSH1 supports .rhosts authentication (it's against the draft for SSH2
SSH1 has more diverse authentication support (AFS, Kerberos, etc.)
Performance for SSH2 is not equal to SSH1"
'via Blog this'
No comments:
Post a Comment