Subject: Re: ssh - are you nuts?!?
To: None <thorpej@zembu.com>
From: None <itojun@iijlab.net>
List: tech-security
Date: 12/19/2000 09:32:08
> > My bad - I was trying to get that out before rushing off to look
> > after the kids, I should have been more explicit in that SSL (which 
> > is what my stelnet uses)  and to a lesser extent SSH provide said integrity 
> > checks.
>Well, SSHv2 uses MACs, so it has real integrity checking.  There are
>also some SSHv1 implementations that have added additional ciphers
>that also use MACs.

	not sure if it is relevant to this topic, but the latest dsniff (2.3)
	include man-in-the-middle attack tool to SSHv1 (need to hijack the
	connection so you need to have control over DNS, or inject forged
	DNS reply).

itojun