Re: SSL vs. SSH in the context of CVE 2014-0160

2014-04-09 Thread Chris Hill
Thanks Wim. On Tue, Apr 8, 2014 at 10:36 PM, Wim Lewis wrote: > > On 8 Apr 2014, at 7:14 PM, Chris Hill wrote: > > Team, I am having a discussions with a few friends about why this > OpenSSL vuln (CVE 2014-0160) does not affect SSH. This may be TOO basic for > many of you (apologize in advance)

Re: SSL vs. SSH in the context of CVE 2014-0160

2014-04-08 Thread Wim Lewis
On 8 Apr 2014, at 7:14 PM, Chris Hill wrote: > Team, I am having a discussions with a few friends about why this OpenSSL > vuln (CVE 2014-0160) does not affect SSH. This may be TOO basic for many of > you (apologize in advance), but can't think of any other way to prove my > point other than sp

SSL vs. SSH in the context of CVE 2014-0160

2014-04-08 Thread Chris Hill
Team, I am having a discussions with a few friends about why this OpenSSL vuln (CVE 2014-0160) does not affect SSH. This may be TOO basic for many of you (apologize in advance), but can't think of any other way to prove my point other than speaking to the folks who really know (that's u). Or maybe