>>>>> "NLY" == Noel L Yap <[EMAIL PROTECTED]> writes:

>>  Especially while there _is_ the way to make sure that advertiser
>> really knows what he says he does.

NLY> How can an SSH server know that the SSH client hasn't been
NLY> compromised and is sending a spoofed username?

Authenticate it, of course.  

Against separate CVS users database.  Thus in your scheme ssh is
needed only to provide protected channel, and the whole thing should
be called "pserver-over-ssh" anyway.

--alexm

Reply via email to