Okay, *I* got a first post here, something tells me the *BSD section is more than slightly underviewed.
Seriously though, wonderful move for OpenBSD. First thing I do on any UNIX system I admin is disable telnetd and only run ssh for remote login. Additionaly, I only trust passwords. I don't allow auth by certificate, and I sure as hell don't allow rsh style auth.
Anon because I hope all the Offtopic mods won't kill my karma:)
I think this is really awesome that the OpenBSD guys did this.. I am totally sure that this will be ported over to every FreeN*X out there in no time flat (I have already seen someone starting a Linux port).. The only problem I have with it (and it isn't something that the OpenBSD guys can fix) is this:
OpenSSH is the best thing to use for remote admin, bar none.. I use it on all my boxen myself.. Unfourtunately I live and work in the US of A, and I am therefore infringing on RSA's patent on the RSA algorithym.
OpenBSD has successfully unencumbered SSH from everything except the patents on the algorithyms they are using. Two of them, RSA & IDEA, are patented and therefore require licensing for commercial use.
IDEA is easily lived without, as SSH uses several other algos for symetric encryption (RC4, DES, 3DES & Blowfish), but only one (RSA) for the public/private key encrytion nessasary to set up a session.
It would be nice if the OpenBSD guys could shove some Diffie-Hellman key exchange code into there as an option for those of us stuck in the States..
Heh... my turn :) (Score:2)
Seriously though, wonderful move for OpenBSD. First thing I do on any UNIX system I admin is disable telnetd and only run ssh for remote login. Additionaly, I only trust passwords. I don't allow auth by certificate, and I sure as hell don't allow rsh style auth.
Anon because I hope all the Offtopic mods won't kill my karma
OpenSSH, but what about that RSA thing? (Score:2)
OpenSSH is the best thing to use for remote admin, bar none.. I use it on all my boxen myself.. Unfourtunately I live and work in the US of A, and I am therefore infringing on RSA's patent on the RSA algorithym.
OpenBSD has successfully unencumbered SSH from everything except the patents on the algorithyms they are using. Two of them, RSA & IDEA, are patented and therefore require licensing for commercial use.
IDEA is easily lived without, as SSH uses several other algos for symetric encryption (RC4, DES, 3DES & Blowfish), but only one (RSA) for the public/private key encrytion nessasary to set up a session.
It would be nice if the OpenBSD guys could shove some Diffie-Hellman key exchange code into there as an option for those of us stuck in the States..
-] Crow