Re: draft-kwatsen-reverse-ssh submission for review
Kent Watsen <[email protected]>
| Newsgroups | gmane.ietf.saag,gmane.ietf.secsh |
|---|---|
| Message-ID | <[email protected]> |
>> I'm a server if I listen on the ssh port. On that port you should >> indicate or negotiate specifics of each side's behavior in-band IMO. > >This sounds like a reasonable point of view to me. > >If your reversed ssh runs kex with roles reversed (ie, connection >initiator takes the server's role, presenting its host key and such), >then a passive snooper can tell the difference, so you might as well >trigger the role reversal with a pre-kex extension packet. OK, I'll submit an updated draft for this approach Thanks, Kent