Re: transfering files back along an existing connection

[Greg A. Woods]

[ On Tuesday, February 2, 1999 at 03:51:08 (-0800), Joe Rhett wrote: ]
> Subject: transfering files back along an existing connection
>
> Yes. And ssh-agent just doesn't work if you can't trust the system you are
> accessing FROM ...

If you cannot trust the system you are accessing a remote trusted host
from then you're so totally and completely hosed that you should
probably just go home and wipe out all your disks.  Have you any idea
how unscrupulous an untrusted host can be if you're using it to access a
trusted host?!?!?!?!  You *MUST* trust the client host.  PERIOD.  This
is why people carry their own laptop to conferences and customer sites
and then they still have to trust the client's network infrastructure
(which is a might bit easier to do if you're there to work on the
client's network infrastructure, but may still not be sufficient -- go
use a modem on a public payphone across the street if you're this
paranoid).

(Sure, you might not want to trust a given client host forever, but
that's a different story, and one that SSH doesn't really have a truly
scalable solution for.)

-- 
                                                        Greg A. Woods

+1 416 218-0098      VE3TCP      <[EMAIL PROTECTED]>      <robohack!woods>
Planix, Inc. <[EMAIL PROTECTED]>; Secrets of the Weird <[EMAIL PROTECTED]>