draft-kwatsen-reverse-ssh-01 submission for review
Kent Watsen <[email protected]>
| Newsgroups | gmane.ietf.saag,gmane.ietf.secsh |
|---|---|
| Message-ID | <[email protected]> |
I've updated the Reverse SSH draft per suggestions:
- now uses IANA-assigned SSH port 22
- now defines proper client and server roles (Reverse SSH client, Reverse SSH server)
- now uses in-band negotiation to automatically authenticate the SSH Server's host key
Key aspects used to achieve this update include:
- contextual awareness to set SSH client/server roles
- definition of a new family of public host key algorithms (hmac-*)
My own thoughts:
- I like how now the host key and MAC algorithm are negotiated for hmac-* use
- I'm glad to find a solution minimizing the impact to existing SSH implementations
Link:
- http://tools.ietf.org/html/draft-kwatsen-reverse-ssh-01
Thanks,
Kent