Subject: Re: ssh - are you nuts?!?
To: None <mipam@ibb.net>
From: Michael Richardson <mcr@sandelman.ottawa.on.ca>
List: tech-security
Date: 12/19/2000 20:38:25
>>>>> "Mipam" == Mipam  <mipam@ibb.net> writes:
    Mipam> This is pop over ssh and so tcp over tcp.

  No, it is not. There is not a second tcp header.

  There pipe which is created is for application data only.

  With SSH1 from SSH.fi, there is an issue in certain situations where you
try and use the port-forwarding (particularly the agent forwarding) and have
chains of SSH. The issue can be summarized as a blocking I/O head-of-queue
problem.

  The SSH 2.0 connection layer now deals with this problem and was one the
major motivations for the 2.0 protocol.
 
] Train travel features AC outlets with no take-off restrictions|gigabit is no[
]   Michael Richardson, Solidum Systems   Oh where, oh where has|problem  with[
]     mcr@solidum.com   www.solidum.com   the little fishy gone?|PAX.port 1100[
] panic("Just another NetBSD/notebook using, kernel hacking, security guy");  [