Re: ssh encryption

2000-01-17 Thread Adam C Powell IV
hypnos wrote:

> Am I correct in assuming that the encryption between
> client/server is started before any exchange of data
> takes place?  Specifically, I'm wondering if the
> username is passed in clear-text or encrypted when
> using the -l  option to ssh client.

The machine public keys are exchanged, after that *everything* (including 
username
and password) is encrypted.

HTH,

-Adam P.



Re: ssh encryption

2000-01-16 Thread Arcady Genkin
hypnos <[EMAIL PROTECTED]> writes:

> I started sshd with the -d (debug) option to try to
> figure this out, and I think I have my answer, but I
> want to make sure.
> 
> Am I correct in assuming that the encryption between
> client/server is started before any exchange of data
> takes place?  Specifically, I'm wondering if the
> username is passed in clear-text or encrypted when
> using the -l  option to ssh client.

User name and password sent over ssh are encrypted.
-- 
Arcady Genkin http://www.thpoon.com
"'What good is my pity? Is not the pity the cross upon which he who
loves man is nailed?..'" (Zarathustra - F. Nietzsche)


ssh encryption

2000-01-15 Thread hypnos
I started sshd with the -d (debug) option to try to
figure this out, and I think I have my answer, but I
want to make sure.

Am I correct in assuming that the encryption between
client/server is started before any exchange of data
takes place?  Specifically, I'm wondering if the
username is passed in clear-text or encrypted when
using the -l  option to ssh client.

Thanks

--
hypnos